Systems and methods for efficient access control

A computer program product, comprising:

• a non-transitory computer-readable medium comprising instructions which, when executed by a processor of a computing system, cause the processor to perform the steps of:
• receiving a statement, containing a plurality of user identities, requesting an access for a user to a data file stored in a non-transitory memory medium;
• parsing the statement into one or more user identity, wherein each user identity ends with a logical operator except a last user identity in the statement;
• computing a skip count for each of the one or more user identity by counting a number of left parenthesis of the user identity and counting a number of left parenthesis of a next user identity, wherein the next user identity is subsequently adjacent to the user identity in the statement;
• evaluating the statement using the skip counts to determine whether the access should be granted to the user, by skipping a number of one or more user identity following a respective user identity based on the skip count of the respective user identity, and ending evaluation of the one or more user identities following a respective user identity if the skip count of the respective user identity is zero to increase the efficiency of access control;
• if access is granted to the user, retrieving the data file from the non-transitory memory medium;
• and sending the data file to the user;
• and
• if access is not granted, denying the statement requesting access;
• wherein by using skip counts to skip portions of the statement during evaluation, lengthy statements for access to data files in a database environment can be evaluated more efficiently.

An apparatus, comprising:

• a memory;
• and
• a processor coupled to the memory, the processor being configured to execute the steps of:
• receiving a statement requesting an access for a user to a data file stored in a non-transitory memory medium;
• parsing the statement into one or more user identity, wherein each argument user identity ends with a logical operator except a last user identity in the statement;
• computing a skip count for each of the user identity by counting a number of left parenthesis of a user identity and counting a number of left parenthesis of a next user identity, wherein the next user identity is subsequently adjacent to the user identity in the statement;
• evaluating the statement using the skip counts to determine whether the access should be granted to the user, by skipping a number of user identity following a respective user identity based on the skip count of the respective user identity, and ending evaluation of user identity following a respective user identity if the skip count of the respective user identity argument is zero to increase the efficiency of access control;
• if access is granted, retrieving the data file from the non-transitory memory medium;
• and sending the data file to the user;
• and if access is not granted, denying the statement requesting access;
• wherein by using skip counts to skip portions of the statement during evaluation, lengthy statements for access to data files in a database environment can be evaluated more efficiently.