Data security using multi-factor authentication

A non-transitory computer-readable medium having instructions stored thereon that are executable by a computer system to perform operations comprising:

• receiving, from a user device, a database operation request that specifies a set of query data, wherein the computer system supports multiple different security levels that require different subsets of a set of authentication factors supported by a known device of a user associated with the user device;
• determining current contextual information for the database operation request, wherein the current contextual information includes an indication of the set of query data;
• selecting, based on the current contextual information, a security level from the multiple different security levels;
• transmitting, to a computing device associated with another user based on the selected security level, an authorization request for the database operation that includes at least a portion of the current contextual information;
• and
• revoking, based on the selected security level and a response from the other user to the authorization request, access privileges of the user for accessing a database corresponding to the database operation request.

A system, comprising:

• at least one processor;
• and
• a memory having instructions stored thereon that are executable by the at least one processor to cause the system to:
• receive, from a user device, a database operation request that specifies a set of query data, wherein the system supports multiple different security levels that require different subsets of a set of authentication factors supported by a known device of a user associated with the user device;
• determine current contextual information for the database operation request, wherein the current contextual information includes an indication of the set of query data and an indication that the database operation is a data masking operation for the set of query data and that the set of query data is stored in a non-production environment;
• select, based on the current contextual information, a security level from the multiple different security levels;
• and
• revoke, based on the selected security level, access privileges of the user for accessing a database corresponding to the database operation request.