Prevention of information leakage from a document based on dynamic database label based access control (lbac) policies

A computer system for preventing information leakage from a document, the computer system comprising:

• one or more processors, one or more computer-readable memories, one or more computer-readable tangible storage devices and program instructions which are stored on at least one of the one or more storage devices for execution by at least one of the one or more processors via at least one of the one or more memories, the program instructions comprising:
• program instructions to receive a request to access documents in a repository;
• program instructions to match articles in the document against access credentials of a requestor;
• program instructions to extract structured information in the document;
• program instructions to extract protected information from rows and columns from the articles of the extracted structured information based on label access controls;
• program instructions to generate protected values in the extracted protected information from the rows and generate protected patterns in the extracted protected information from the columns;
• and
• program instructions to redact the generated protected values and protected patterns.

A computer program product for preventing information leakage from a document, the computer program product comprising:

• one or more computer-readable tangible storage devices and program instructions stored on at least one of the one or more storage devices, the program instructions comprising:
• program instructions to receive a request to access documents in a repository;
• program instructions to match articles in the document against access credentials of a requestor;
• program instructions to extract structured information in the document;
• program instructions to extract protected information from rows and columns from the articles of the extracted structured information based on label access controls;
• program instructions to generate protected values in the extracted protected information from the rows and generate protected patterns in the extracted protected information from the columns;
• and
• program instructions to redact the generated protected values and protected patterns.