Updates to access permissions of sub-queries at run time

One or more computer-readable media having instructions stored thereon, the instructions, when executed by a processor of a computing device, to cause the computing device to perform a method comprising:

• assigning a first access permission to a first query, wherein the first access permission grants access rights to a portion of a data source that satisfies the first query;
• receiving a second query that is associated with a second access permission that grants the access rights of the first access permission to the portion of the data source in response to executing the second query, wherein the first query is a subquery of the second query;
• and
• in response to the executing the second query, granting the access rights of the first access permission to the portion of the data source that satisfies the first query based at least on identifying the second access permission is associated with the second query, such that when the first query is executed as the subquery of the second query, the portion of the data source that satisfies the first query is accessed.

A system comprising:

• one or more processors;
• and
• memory having instructions stored thereon, the instructions, when executed by the one or more processors, to cause the system to perform a method comprising:
• assigning a first access permission to a first query, wherein the first access permission grants access rights to a portion of a data source that satisfies the first query;
• receiving a second query that is associated with a second access permission that grants the access rights of the first access permission to the portion of the data source in response to executing the second query, wherein the first query is a subquery of the second query;
• and
• in response to the executing the second query, granting the access rights of the first access permission to the portion of the data source that satisfies the first query based at least on identifying the second access permission is associated with the second query, such that when the first query is executed as the subquery of the second query, the portion of the data source that satisfies the first query is accessed.