公开(公告)号：US12061712B2

公开(公告)日：2024-08-13

申请号：US17514983

申请日：2021-10-29

Applicant: SAP SE

Inventor： Michael Wilking ,  Michael te Uhle ,  Florian Maier ,  Ioannis Kostis ,  Atul Rajendra Prasad Tiwari ,  Leonardo Silva Rosa

IPC: G06F21/62 ,  G06F16/23 ,  G06F21/60

CPC classification number: G06F21/6227 ,  G06F16/2393 ,  G06F21/604 ,  G06F2221/2141

Abstract: Embodiments enforce user access rights to a data view, by initially generating a replication table of the view. The replication table may include all view data to which any user is entitled. This replication table may be generated during a first database session having a first value for a session variable. Next, a data access control structure is applied to the replication table to produce output comprising a subset of the view data for a specific user. This output may be produced during a second database session having a second value for the session variable. By initially generating the view replication table up front, processing resources are conserved in later stages when access control structures are applied to grant view access rights to particular users. Alternative embodiments may implement access control to data views, through the creation and storage of derived views.

公开(公告)号：US20230022454A1

公开(公告)日：2023-01-26

申请号：US17514983

申请日：2021-10-29

Applicant: SAP SE

Inventor： Michael Wilking ,  Michael te Uhle ,  Florian Maier ,  Ioannis Kostis ,  Atul Rajendra Prasad Tiwari ,  Leonardo Silva Rosa

IPC: G06F21/62 ,  G06F21/60 ,  G06F16/23

Abstract: Embodiments enforce user access rights to a data view, by initially generating a replication table of the view. The replication table may include all view data to which any user is entitled. This replication table may be generated during a first database session having a first value for a session variable. Next, a data access control structure is applied to the replication table to produce output comprising a subset of the view data for a specific user. This output may be produced during a second database session having a second value for the session variable. By initially generating the view replication table up front, processing resources are conserved in later stages when access control structures are applied to grant view access rights to particular users. Alternative embodiments may implement access control to data views, through the creation and storage of derived views.

公开(公告)号：US20160267129A1

公开(公告)日：2016-09-15

申请号：US15164432

申请日：2016-05-25

Applicant: SAP SE

Inventor： Sebastian Schroetel ,  Stefan Dipper ,  Michael Wilking ,  Christof Mueller

IPC: G06F17/30

Abstract: In one embodiment, a method receives a query for analyzing data in a database. The query includes a first level calculation that is performed before a second level calculation. When an operator associated with the first level calculation is present in the query, the method performs: calculating the first level calculation by removing group by information for a reference characteristic for the first level calculation to determine a first level calculation result and calculating the second level calculation using the first level calculation result using the group by information for the reference characteristic to determine a second level calculation result, wherein the group by in the second level calculation combines groups of rows in a database table of the database that have the same content in their specified columns.

Abstract translation: 在一个实施例中，方法接收用于分析数据库中的数据的查询。 该查询包括在第二级计算之前执行的第一级计算。 当在查询中存在与第一级计算相关联的操作者时，该方法执行：通过移除用于第一级计算的参考特征的信息组来计算第一级计算，以确定第一级计算结果并计算第二级 使用第一级计算结果使用用于参考特征的信息组进行计算，以确定第二级计算结果，其中第二级计算中的组合计算将数据库中具有相同内容的数据库表中的行组合 他们指定的列。