Sap Se

Andrea Waldi

Michael Aakolk

Carsten Ziegler

Bernhard Drabant

Marco Wuest

Joydeep Paul

Systems, methods, and computer programmable products are described herein for tracking modifications of a hierarchical database table of an application. Data including a modification to the hierarchical database table having a plurality of database entries is received. A change trigger table having a record corresponding to the modification of a database entry of the plurality of database entries is defined. The change trigger table is provided to a unified instance authorization application for further definition of an explosion database table.

Unified instance authorizations with application owned hierarchies

A hierarchy of object groups is defined. Objects group collections are defined on top of the hierarchy. Authorization rights for executing actions are defined through the object group collection definitions. A request for a change associated with assignments of an object group in a hierarchy of a plurality of object groups may be received, where the assignments are related to object group collections. A change trigger is stored at an explosion update trigger table. The change trigger is stored synchronously with updating definitions of the object group collections and/or updating the hierarchy organization. The explosion update trigger table is processed to determine changes for the explosion table. The change trigger may be processed together with one or more other triggers associated with the object group. The explosion table is updated to reflect changes to the object group and other object groups hierarchically inherent for the object group.

Asynchronous update of explosion definitions based on change triggers for evaluation of authorization rights

A data model is defined to describe objects. Attributes from the data model are associated with providing authorization right for executing actions on object instances of the objects. A hierarchy of object groups is declared. Objects group collections are defined on top of the hierarchy. A vocabulary including definitions of attributes of objects and including definitions of assignments of objects to object groups is created. The vocabulary is related to determining authorization rights for executing actions based on attributes and hierarchy organization of objects. A capability to determine authorization to perform an action by a user on a set of objects is defined based on the vocabulary. When a request for performing an action by a user on object instances is received, a filtering expression based on the capability is generated to be included in a where clause of a query.

Unified instance authorization based on attributes and hierarchy assignment

In one aspect, a computer-implemented method comprises obtaining, in a business rule management application, a selection of one or more in-memory database objects, obtaining, in the business rule management application, a definition of one or more business rules, generating a business rule management application object, wherein the business rule management application object includes a representation of the one or more business rules and a representation of one or more results of the application of the one or more business rules on the one or more in-memory database objects, the method further comprising providing the business rule management application object for storage in the in-memory database.

Growing community of inventors

Viernheim, Germany

Andrea Waldi