Rule-based query control
AssigneeOracle International Corporation
InventorsRagupathy Jayaraj, Vamshidhar Reddy Pasham, Girish Kumar Balachandran
Life of this patent
Estimating the term…
Abstract
Systems for fine-grained control of query execution are disclosed. The system receives and stores access control rules to be applied to queries. The system applies access control rules to a received query to determine one or more actions corresponding to the received query. Based on the access control rules, the system can allow execution of the query without conditions, allow execution of the query under a set of conditions, or prevent execution of the query.
Claims30
A non-transitory computer readable medium comprising instructions which, when executed by one or more hardware processors, causes performance of operations comprising:
- receiving a plurality of rules to apply to queries for configuring a respective plurality of actions corresponding to the queries;
- storing the plurality of rules to apply to the queries;
- receiving, from a first user via a computer-user interface, a first request to execute a first valid query on a first database, the first valid query comprising a first plurality of elements;
- applying the plurality of rules to the first valid query to select a first action of the plurality of actions, the first action comprising execution of the first valid query on the first database;
- executing the first valid query based on the selected first action;
- receiving, from the first user via the computer-user interface, a second request to execute a second valid query on the first database, the second valid query comprising a second plurality of elements;
- applying the plurality of rules to the second valid query to select a second action of the plurality of actions, the second action comprising limiting the second request for executing the second valid query on the first database;
- and
- limiting execution of the second valid query on the first database based on the selected second action.
A method comprising:
- receiving a plurality of rules to apply to queries for configuring a respective plurality of actions corresponding to the queries;
- storing the plurality of rules to apply to the queries;
- receiving, from a first user via a computer-user interface, a first request to execute a first valid query on a first database, the first valid query comprising a first plurality of elements;
- applying the plurality of rules to the first valid query to select a first action of the plurality of actions, the first action comprising execution of the first valid query on the first database;
- executing the first valid query based on the selected first action;
- receiving, from the first user via the computer-user interface, a second request to execute a second valid query on the first database, the second valid query comprising a second plurality of elements;
- applying the plurality of rules to the second valid query to select a second action of the plurality of actions, the second action comprising limiting the second request for executing the second valid query on the first database;
- and
- limiting execution of the second valid query on the first database based on the selected second action.
A system comprising:
- at least one device including a hardware processor, the system being configured to perform operations comprising:
- receiving a plurality of rules to apply to queries for configuring a respective plurality of actions corresponding to the queries;
- storing the plurality of rules to apply to the queries;
- receiving, from a first user via a computer-user interface, a first request to execute a first valid query on a first database, the first valid query comprising a first plurality of elements;
- applying the plurality of rules to the first valid query to select a first action of the plurality of actions, the first action comprising execution of the first valid query on the first database;
- executing the first valid query based on the selected first action;
- receiving, from the first user via the computer-user interface, a second request to execute a second valid query on the first database, the second valid query comprising a second plurality of elements;
- applying the plurality of rules to the second valid query to select a second action of the plurality of actions, the second action comprising limiting the second request for executing the second valid query on the first database;
- and
- limiting execution of the second valid query on the first database based on the selected second action.
Dependencies are inferred from the claim text.