PUSH-DOWN OF AUTHORITY CHECK WITHIN QUERY ENGINE

摘要

A query engine for integrating authorization conditions within a database query statement. The query engine may include an authorization handler configured to receive authorization parameters related to one or more authorization objects for data relevant to a query for performing an authority check, and obtain at least one user authorization profile for a current user based on the authorization parameters. The at least one user authorization profile may include an activity value and one or more authorization conditions associated with the activity value. The query engine may further include a query generator configured to receive query parameters related to the query and integrate the query parameters with the one or more authorization conditions to obtain a database query statement, and a database selector configured to obtain authorized data from an in-memory database based on the database query statement.

主权项

1. A query engine for integrating authorization conditions within a database query statement, the query engine comprising:
at least one processor; a non-transitory computer-readable storage medium including instructions executable by the at least one processor, the instructions configured to implement, an authorization handler configured to receive authorization parameters related to one or more authorization objects for data relevant to a query for performing an authority check; the authorization handler configured to obtain at least one user authorization profile for a current user based on the authorization parameters, the at least one user authorization profile including an activity value and one or more authorization conditions associated with the activity value; a query generator configured to receive query parameters related to the query and integrate the query parameters with the one or more authorization conditions to obtain a database query statement; and a database selector configured to obtain authorized data from an in-memory database based on the database query statement, the authorized data including a subset of data that is authorized for display.