Access control system for access revocation in a database

A non-transitory computer-readable storage medium for storing instructions that when executed by one or more computer processors cause the one or more computer processors to perform steps comprising:

• determining a first set of data objects stored in a source database of a source system that are accessible to a user of a target system based on an access control specification of the user;
• sending the first set of data objects to the target system for storing in a target database of the target system, wherein the target database is configured to operate in one of online mode or offline mode;
• receiving a request for change in access control specification of the user, the request for change in access control specification received while the target system is offline, wherein the request for change is associated with a sequence number indicating an order of change events occurred;
• determining a second set of data objects that are inaccessible to the user responsive to the change in access control specification of the user;
• receiving an indication that the target system is online;
• and
• responsive to receiving the indication that the target system is online, performing a data synchronization of the source system and the target system, wherein each data synchronization is associated with a since number indicating an order of data synchronizations performed, and the data synchronization is performed based on previous change events, sequence numbers associated with the previous change events, previous data synchronizations, and since numbers associated with the previous data synchronizations, the data synchronization comprising,
• sending, from the source system to the target system, information identifying the second set of data objects;
• and
• causing the second set of data objects to be removed from the target database on the target system.

A computer system comprising:

• one or more computer processors;
• and
• a non-transitory computer-readable storage medium for storing instructions that when executed by the one or more computer processors cause the one or more computer processors to perform steps comprising:
• determining a first set of data objects stored in a source database of a source system that are accessible to a user of a target system based on an access control specification of the user;
• sending the first set of data objects to the target system for storing in a target database of the target system, wherein the target database is configured to operate in one of online mode or offline mode;
• receiving a request for change in access control specification of the user, the request for change in access control specification received while the target system is offline, wherein the request for change is associated with a sequence number indicating an order of change events occurred;
• determining a second set of data objects that are inaccessible to the user responsive to the change in access control specification of the user;
• receiving an indication that the target system is online;
• and
• responsive to receiving the indication that the target system is online, performing a data synchronization of the source system and the target system, wherein each data synchronization is associated with a since number indicating an order of data synchronizations performed, and the data synchronization is performed based on previous change events, sequence numbers associated with the previous change events, previous data synchronizations, and since numbers associated with the previous data synchronizations, the data synchronization comprising,
• sending, from the source system to the target system, information identifying the second set of data objects;
• and
• causing the second set of data objects to be removed from the target database on the target system.