Back to results
US 2006/0136479 A1Published application
Secured views for a CRM database
AssigneeMicrosoft Corporation
InventorsMin Fan, Edward Martinez, Tsvi Reiter, Jasjit Grewal
Life of this patent
Estimating the term…
Abstract
The claims of the present application recite a method and system for accessing information in an otherwise inaccessible application database of a DBMS using view definitions that implement a security protocol.
Claims20
A computer-readable medium having computer-executable instructions for creating secured views for a database comprising:
- creating a database comprising at least one database table and at least one database view, wherein the database table has a row ID, a row business unit, and a row owner;
- allowing a user to access and execute the database view while preventing the user from viewing and directly accessing the database table, wherein the user has an associated user ID, an associated user business unit, an associated user business group, and an associated privilege depth;
- and
- selecting a set of rows of the database table for the database view based on at least one parameter from the set of parameters comprising the user ID, the user business unit, the user business group, and the privilege depth, and at least one parameter from the set of parameters comprising the row ID, the row business unit, and the row owner.
1 more element
A computer system comprising:
- an operating system providing a user authentication service;
- a database management system for managing a set of databases, the database management system using the user authentication service to authenticate a user connecting to the database management system;
- a customer relationship management system;
- a customer database accessed by the customer relationship management system through the database management system, wherein the customer database comprises a customer database table;
- a view definition stored at the customer database for exposing rows of the customer database table, wherein the database management system enables a user logged onto the database management system to view a listing of the view definition and to execute the view, while preventing the user from viewing and accessing the customer database table;
- and further wherein the view exposes a row of the customer database table based on at least one parameter from the set of parameters comprising:
- a user ID, a user business unit, a user business group, and a privilege depth, and at least one parameter from the set of parameters comprising a row ID, a row business unit, and a row owner.
4 more elements
A computing apparatus comprising:
- a display unit that is capable of generating video images;
- an input device;
- a processing apparatus operatively coupled to said display unit and said input device, said processing apparatus comprising a processor and a memory operatively coupled to said processor;
- a network interface connected to a network and to the processing apparatus;
- said processing apparatus being programmed to:
- manage a database comprising a table and a view, wherein the processing apparatus prevents a user from accessing and viewing the table while the processing apparatus allows the user to access and execute the view;
- and further wherein the view selects a set of rows of the table based on at least one parameter from the set of parameters comprising a user ID, a user business unit, a user business group, and a user privilege depth, and at least one parameter from the set of parameters comprising a row ID, a row business unit, and a row owner.
4 more elements
Dependencies are inferred from the claim text.