Real-time analytical queries of a document store

A system comprising:

• at least one data processor;
• and
• at least one memory storing instructions which, when executed by the at least one data processor, result in operations comprising:
• receiving a query and an access control list associated with a user submitting the query for processing to a search engine, the access control list being assigned to the query for user authentication during query analysis by an insight engine, the query including a request to access content managed by a content management system;
• generating an execution plan for the search engine to process the query based on a virtual field included in a virtual database schema to specify different behaviors in generating the execution plan, the virtual field pointing to metadata stored in a database that is not assessable to the user submitting the query;
• calculating the virtual field value based on one or more field values in the virtual database schema;
• using the execution plan to search a search index and return a result set of documents, in response to receiving the query, wherein the virtual field does not exist in the search index;
• constraining results returned from the query using a content index of a plurality of content items maintained in a repository of the content management system, the constraining comprising limiting a content item of the plurality of content items from being added to a permissions-filtered results set based on the access control list assigned to the query;
• aggregating based on the execution plan, the permissions-filtered results set and returning the aggregated permissions-filtered results set to the content management system.

A non-transitory computer program product storing instructions which, when executed by at least one data processor, causes operations comprising:

• receiving a query and an access control list associated with a user submitting the query for processing to a search engine, the access control list being assigned to the query for user authentication during query analysis by an insight engine, the query including a request to access content managed by a content management system;
• generating an execution plan for the search engine to process the query based on a virtual field included in a virtual database schema to specify different behaviors in generating the execution plan, the virtual field pointing to metadata stored in a database that is not assessable to the user submitting the query;
• calculating the virtual field value based on one or more field values in the virtual database schema;
• using the execution plan to search a search index and return a result set of documents, in response to receiving the query, wherein the virtual field does not exist in the search index;
• constraining results returned from the query using a content index of a plurality of content items maintained in a repository of the content management system, the constraining comprising limiting a content item of the plurality of content items from being added to a permissions-filtered results set based on the access control list assigned to the query;
• aggregating based on the execution plan, the permissions-filtered results set and returning the aggregated permissions-filtered results set to the content management system.