Back to results
US 11,899,810 B2Granted
Systems and methods for determining database permissions
AssigneeDatawalk Spolka Akcyjna
InventorKrystian Piecko
Life of this patent
Estimating the term…
Abstract
The present disclosure provides a computer-implemented method for applying access rights to a database comprising a plurality of data units. The method may comprise receiving a request from a user to perform an operation directed to at least a subset of data objects stored in the database. Next, access rights associated with the user may be determined. The access rights may comprise an access permission to a subset of one or more of the data units that is implemented by performing a filter operation. The operation and the filter operation may then be performed concurrently to the at least subset of data objects to obtain a filtered data set.
Claims20
A computer-implemented method for applying access rights to a non-hierarchical database, comprising:
- (a) storing data objects in the non-hierarchical database, wherein the non-hierarchical database comprises a plurality of predefined data structures to store the data objects in a non-hierarchical manner, and wherein the plurality of predefined data structures comprises a first data structure comprising a definition of data sets in the non-hierarchical database, a second data structure comprising definitions of properties of data objects in the non-hierarchical database, and a third data structure comprising definitions of objects of the data sets in the non-hierarchical database;
- (b) creating a plurality of permission schemas and storing the plurality of permission schemas in a plurality of permission schemas data structures, wherein the plurality of permission schemas data structures define one or more access permissions to at least a subset of the plurality of predefined data structures in (a) without including user information;
- (c) storing an assignment of one or more of the plurality of permission schemas to a user in another data structure, wherein the another data structure comprises a unique user identifier and one or more unique identifiers of the one or more of the plurality of permission schemas in (b), and ordering the one or more of the plurality of permission schemas based at least in part on an order of priority;
- (d) upon receiving a request from the user to perform an operation directed to at least a subset of data objects stored in the database, determining a final access right associated with the user by consolidating, based at least in part on the order of priority, one or more of the plurality of permission schemas assigned to the user;
- and
- (e) executing both (i) the operation directed to the at least the subset of data objects and (ii) a filter operation implementing the final access right determined in (d) to the at least the subset of data objects to obtain a filtered data set.
3 more elements
A system for applying access rights to a non-hierarchical database comprising:
- one or more computer processors operatively coupled to the non-hierarchical database, wherein the one or more computer processors are individually or collectively programmed to:
- (a) store data objects in the non-hierarchical database, wherein the non-hierarchical database comprises a plurality of predefined data structures to store the data objects in a non-hierarchical manner, and wherein the plurality of predefined data structures comprises a first data structure comprising a definition of data sets in the non-hierarchical database, a second data structure comprising definitions of properties of data objects in the non-hierarchical database, and a third data structure comprising definitions of objects of the data sets in the non-hierarchical database;
- (b) create a plurality of permission schemas and store the plurality of permission schemas in a plurality of permission schemas data structures, wherein the a plurality of permission schemas data structures define one or more access permissions to at least a subset of the plurality of predefined data structures in (a) without including user information;
- (c) storing an assignment of one or more of the plurality of permission schemas to a user in another data structure, wherein the another data structure comprises a unique user identifier and one or more unique identifiers of the one or more of the plurality of permission schemas in (b), and order the one or more of the plurality of permission schemas based at least in part on an order of priority;
- (d) upon receiving a request from the user to perform an operation directed to at least a subset of data objects stored in the database, determine a final access right associated with the user by consolidating, based at least in part on the order of priority, one or more of the plurality of permission schemas assigned to the user;
- and
- (e) execute both (i) the operation directed to the at least the subset of data objects and (ii) filter operation implementing the final access right determined in (d) to the at least the subset of data objects to obtain a filtered data set.
4 more elements
Dependencies are inferred from the claim text.