Push-down of authority check within query engine

A computer program product tangibly embodied on a non-transitory computer-readable storage medium and including executable code that, when executed, is configured to cause a query engine to integrate authorization conditions within a database query statement, the executable code comprising instructions to:

• receive authorization parameters related to one or more authorization objects for data relevant to a query for performing an authority check;
• obtain at least one user authorization profile for a current user based on the authorization parameters, the at least one user authorization profile including an activity value and one or more authorization conditions associated with the activity value;
• receive query parameters related to the query and integrate the query parameters with the one or more authorization conditions to obtain a database query statement;
• and
• obtain authorized data from an in-memory database based on the database query statement, the authorized data including a subset of data that is authorized for display.

A method for integrating authorization conditions within a database query statement, the method comprising:

• receiving, by at least one processor, authorization parameters related to one or more authorization objects for data relevant to a query for performing an authority check;
• obtaining, by at least one processor, at least one user authorization profile for a current user based on the authorization parameters, the at least one user authorization profile including an activity value and one or more authorization conditions associated with the activity value;
• receiving, by at least one processor, query parameters related to the query and integrating, by at least one processor, the query parameters with the one or more authorization conditions to obtain a database query statement;
• and
• obtaining, by at least one processor, authorized data from an in-memory database based on the database query statement, the authorized data including a subset of data that is authorized for display.