Database row access control
AssigneeInternational Business Machines Corporation
InventorsRafal P. Konik, Roger A. Mittelstadt, Brian R. Muras, Mark W. Theuer
Life of this patent
Estimating the term…
Abstract
A method, system, and computer program product to create an access control bit mapping (ACBM) structure for a corresponding database table are disclosed. The ACBM structure may include a relative record number (RRN) bit map. The RRN bit map may describe the access rights for a parameter. The computer-implemented method may maintain one or more statistics describing the RRN bit map. The method may additionally provide for updating the ACBM structure. The method may also provide for using the ACBM structure to process a database query.
Claims14
A computer-implemented method comprising:
- creating, by one or more computer processors, an access control bit mapping (ACBM) structure for a database table in a memory, the database table having a number of database rows, each database row including an access control field value selected from a plurality of candidate access control field values, the access control field value designating access rights to the database row, the ACBM structure having a number of entries, each entry including a parameter field value designating the access rights associated with at least one of the plurality of candidate access control field values, each entry further including a relative record number (RRN) bit map, the RRN bit map having a number of bits corresponding to the number of database rows in the database table, each bit indicating whether the parameter field value designates the access rights determined by the access control field value of the corresponding database row, wherein the parameter field value of a first entry in the ACBM structure designates first access rights, wherein a target number of database rows are accessible under the first access rights, and wherein the target number of bits in the RRN bit map of the first entry identifies the corresponding accessible database rows;
- determining one or more statistics from the RRN bit map, wherein the one or more statistics correspond to accessible rows of the database table associated with the parameter field value;
- and
- updating the ACBM structure in response to determining that the database table has been modified, the updating including modifying the RRN bit map of at least one entry.
Dependencies are inferred from the claim text.