Association-based access control delegation

US10915649B2 · kind B2 · utility

Assignee

• SAP SE · DE

Inventors

• Juergen Kremp · Walldorf, DE
• Ralf Miko
• Andreas Riehl · Wiesloch, DE
• Michael Belenki · Karlsruhe, DE

Key dates

• Filing date: Sep 10, 2018
• Grant date: Feb 9, 2021
• Expiry date: Feb 19, 2039

Classification

• Technology area (CPC G): Physics
• CPC primary: G06F2221/2145
• WIPO field: Computer technology
• WIPO sector: Electrical engineering

Abstract

The present disclosure involves systems, software, and computer implemented methods for access control delegation. One example method includes identifying creation of a derived entity from an originating entity. A definition of the derived entity is modified to include an association to the originating entity. A derived access control definition is created based on an originating access control definition. Access control condition(s) in the derived access control definition are identified. Modified access control condition(s) are created by modifying column reference(s) to include a reference to the association to the originating entity. A query is received for the derived entity. A modified query is created by including, in the received query, the modified access control condition(s) and unfolding the association to the originating entity. The modified query is executed, including evaluation of the modified access control condition(s) to determine records of the derived entity that are accessible to a query user.