公开(公告)号：US10380334B2

公开(公告)日：2019-08-13

申请号：US14934629

申请日：2015-11-06

Applicant: SAP SE

Inventor： Ajalesh P. Gopi ,  Tenzin Choegyen ,  Santosh V ,  Sharath Jois ,  Axel Herbst

IPC: G06F17/30 ,  G06F7/00 ,  G06F21/34 ,  G06F21/62

Abstract: The user of an application may query a data storage system with a request to access a dataset from a database of the system. The system identifies at least one data access rule that is applicable to the dataset, with the at least one data access rule specifying at least one user group authorized to access a restricted portion of the dataset. The system identifies an authorized access group associated with the application user and compares it to the at least one user group authorized to access the restricted portion of the dataset. If the authorized access group associated with the user does not match one of the at least one user group authorized to access the restricted portion of the dataset, the system assembles a modified dataset based on the dataset and the at least one data access rule and transmits the modified dataset to the application.

公开(公告)号：US20170132401A1

公开(公告)日：2017-05-11

申请号：US14934629

申请日：2015-11-06

Applicant: SAP SE

Inventor： Ajalesh P. Gopi ,  Tenzin Choegyen ,  Santosh V ,  Sharath Jois ,  Axel Herbst

IPC: G06F21/34 ,  G06F21/62

CPC classification number: G06F21/34 ,  G06F21/6218 ,  G06F21/6227 ,  G06F2221/2141

Abstract: The user of an application may query a data storage system with a request to access a dataset from a database of the system. The system identifies at least one data access rule that is applicable to the dataset, with the at least one data access rule specifying at least one user group authorized to access a restricted portion of the dataset. The system identifies an authorized access group associated with the application user and compares it to the at least one user group authorized to access the restricted portion of the dataset. If the authorized access group associated with the user does not match one of the at least one user group authorized to access the restricted portion of the dataset, the system assembles a modified dataset based on the dataset and the at least one data access rule and transmits the modified dataset to the application.