Secure execution of a user defined function

A method comprising:

• receiving, in a first computing process, a user defined function, the user defined function including code related to at least one operation to be performed;
• sending a request based at least in part on the at least one operation to a second computing process to perform;
• determining, by a security manager executing within the second computing process, whether performing the at least one operation is permitted, the security manager determines restrictions, based at least in part on a security policy, on operations executing within a sandbox environment provided by the second computing process;
• performing, in the second computing process, the at least one operation, the security
• manager executing within the second computing process;
• and
• sending, by the second computing process, a result of the at least one operation to the first computing process, wherein sending, by the second computing process, the result of the at least one operation utilizes a data transport mechanism that supports a network transfer of columnar data, the columnar data is transferred without memory copying or serialization.

A non-transitory computer-storage medium comprising instructions that, when executed by one or more processors of a machine, configure the machine to perform operations comprising:

• receiving, in a first computing process, a user defined function, the user defined function including code related to at least one operation to be performed;
• sending a request based at least in part on the at least one operation to a second computing process to perform;
• determining, by a security manager executing within the second computing process, whether performing the at least one operation is permitted, the security manager determines restrictions, based at least in part on a security policy, on operations executing within a sandbox environment provided by the second computing process;
• performing, in the second computing process, the at least one operation, the security manager executing within the second computing process;
• and
• sending, by the second computing process, a result of the at least one operation to the first computing process, wherein sending, by the second computing process, the result of the at least one operation utilizes a data transport mechanism that supports a network transfer of columnar data, the columnar data is transferred without memory copying or serialization.