Sap Se

Dongmei Xv

Yinghua Ouyang

Taehyung Lee

Zhen Tian

Hong-Hai Do

Taeyoung Jeong

Xun Zhang

Yanchen Cao

1. Implementations of the present disclosure include receiving, by a database system, a query from an entity, providing a parse tree based on the query, the parse tree including nodes representative of operations to be executed and data objects stored within the database system, generating a module tree based on the parse tree, the module tree including a set of modules provided in sequential order from a root module to a leaf module, and executing an authorization check using the module tree by, for each module, determining a set of data objects and, for each data object in the set of data objects, determining whether the entity is one or more of authorized access the data object and perform an operation on the data object.

Authorization checks and auditing for queries in database systems

Growing community of inventors

Xi'an, China

Dongmei Xv