摘要:
A method, system and article of manufacture for protecting sensitive data in databases and, more particularly, for managing access to sensitive data in a database. One embodiment comprises receiving a query against the data in the database comprising at least (i) a result field specification, and (ii) a sorting instruction. The method further comprises retrieving a result set from the database, and filtering the retrieved result set on the basis of predefined filtering rules to remove selected data from a selected result field of at least one data record included with the retrieved result set. The filtered result set is sorted according to the sorting instruction to produce the sorted result set, whereby the sorting is done independently of the removed selected data so that the sorted result set places the at least one data record at a position which is non-indicative of a value of the removed selected data.
摘要:
A method, system and article of manufacture for managing presentation of query results. One embodiment comprises receiving, from a requesting entity, a query having at least (i) one result field for which data from one or more databases is to be returned, (ii) one or more conditions for filtering which of the data contained in the one or more databases is returned for each result field, and (iii) a conditions object defining at least one expression for at least one of the conditions. The query is executed against the one or more databases to obtain a query result having one or more data records. The query result is returned in a format relating the data records to respective expressions on the basis of which conditions the data records satisfy. Thereby, it is exposed which of the data records satisfy respective conditions having defined expressions in the conditions object.
摘要:
A method, system and article of manufacture for managing execution of queries against databases and more particularly for restricting access to sensitive data in underlying databases. One embodiment provides a method for managing access to sensitive data in a database. The method comprises receiving, from a requesting entity, a query against the data in the database. The query is executed against the database to obtain a result set. The method further comprises determining whether the result set includes sensitive data based on predefined sensitivity attributes associated with data in the result set. If so, a sensitivity rating is determined for the result set, and a predefined security action is preformed with respect to the result set on the basis of the determined sensitivity rating.
摘要:
Embodiments of the present invention provide methods and systems for increasing the flexibility and reusability of parameterized queries. A user may be allowed to select and run a predefined query. If the query is a parameterized query, the user may be prompted to input one or more parameters. Embodiments of the invention allow the user to recommend a parameter that retrieves maximum or minimum results for the query instead of specifying a parameter. In response to such a user selection, a predefined parameter may be inserted as a parameter for the query. Alternatively, the query may be modified by changing or removing one or more query conditions to achieve the desired results.
摘要:
Embodiments of the invention provide a mechanism for selecting an authorization filter to apply when executing a database query, based on the focus of the database query. Based on the focus specified for a given of the query, different conditions may be added during query processing to a database query. Doing so provides a flexible approach to managing data access requests where queries may focus on the same underlying data from many different perspectives.
摘要:
A method, system and article of manufacture for managing relationships between database tables and, more particularly, for identifying and accurately describing relationships between tables in a database. One embodiment provides a method for identifying relationships between tables in a database. The method comprises receiving user input selecting a plurality of tables from the database. The plurality of tables is organized into a logical island defining a logical unit related to a particular logical entity. The method further comprises receiving user input identifying, for each of the plurality of tables, a table column containing information that identifies the particular logical entity in the table, whereby the identified table columns of different tables define logical relationships between the different tables in the logical island. On the basis of the identified table columns, relations specifications are created which describe the logical relationships between the different tables in the logical island.
摘要:
An apparatus and method for a graphical user interface allow performing operations simply by dragging a first object over a second object. One or more attributes of the second object are effectively “picked up” by virtue of dragging over the second object. In this manner, the user interface is more friendly, more intuitive, and reduces the number of pointer clicks to implement a particular function, thereby enhancing the efficiency of the user.
摘要:
Methods, systems, and articles of manufacture are provided for composing abstract queries by referencing previously defined abstract queries and combining the queries based on mathematic operations, referred to as “query math”. Composing queries by performing query math, such as addition and subtraction, with whole abstract queries facilitates and encourages reuse of existing abstract queries.
摘要:
Methods, articles of manufacture and systems for managing execution of workflows. One embodiment provides a computer-implemented method for managing execution of a data driven multi-step workflow. The method includes receiving input data for a step of the workflow and performing the step of the workflow on the input data to obtain a result set. Then, at least one rule is applied to the result set for determining whether one or more associated conditions are satisfied. The at least one rule defines the one or more associated conditions and an associated process. If the one or more associated conditions are satisfied, the associated process is performed on the result set.
摘要:
A method, computer-readable medium and system for comparing query-related objects are provided. In one embodiment, a first plurality of query-related objects for a first user is compared to a second plurality of query-related objects for a second user to determine a degree of similarity between the first and second plurality of query-related objects. A notification of the degree of similarity is issued.