Using domains for flexible data access in heterogeneous system landscapes

US11042654B2 · kind B2 · utility

Assignee

• SAP SE · DE

Inventors

• Kathrin Nos · Nümbrecht, DE
• Michael Engler · Stamford, US
• Matthias Vogel · Neuhaus, DE

Key dates

• Filing date: Dec 11, 2018
• Grant date: Jun 22, 2021
• Expiry date: Oct 9, 2039

Classification

• Technology area (CPC G): Physics
• CPC primary: G06F2221/2149
• WIPO field: Digital communication
• WIPO sector: Electrical engineering

Abstract

Metadata describing access control capabilities of a database technology resource is received from an access control system. Access restrictions for accessing data of the database resource by users of an application that have a role are received from an application developer. A role maintenance user interface is generated, using the metadata, for assigning the role to users of the application. Attribute values for creating an instance of the role for a user are received, using the role maintenance user interface. The instance of the role is created for the user based on the received attribute values and the access restrictions. A request from the application for the user to access the database resource is received by the access control system when the user is logged into the application. The access restrictions are applied by the access control system in the database resource when the database resource is accessed.