Sap Se

Ioannis Kostis

Abhay A Tiple

Michael Te Uhle

Jascha Kanngiesser

Atul Rajendra Prasad Tiwari

Florian Maier

Leonardo Silva Rosa

Michael Wilking

Leonardo Pletsch

Simon Elsbrock

Lucas Mendonca De Souza Xavier

Peter Haerle

Victor Matheus Silva Peixoto

Julian Schmidt-Kluegmann

Bjoern Friedmann

Joerg Franke

Paulo Buettenbender

A system and method to receive a replicated representation of a data entity and a replicated representation of application specific permissions associated with the data entity, the application specific permissions being defined by a source application sourcing the data entity; store the replicated representations of the data entity and the application specific permissions in a dedicated storage space for the source application within a consolidated cloud storage; automatically generate a secured data entity based on an integration of the replicated representation of the application specific permissions with the replicated representation of the data entity; and store the generated secured data entity in the dedicated storage space for the source application.

Data plane authorization

Embodiments enforce user access rights to a data view, by initially generating a replication table of the view. The replication table may include all view data to which any user is entitled. This replication table may be generated during a first database session having a first value for a session variable. Next, a data access control structure is applied to the replication table to produce output comprising a subset of the view data for a specific user. This output may be produced during a second database session having a second value for the session variable. By initially generating the view replication table up front, processing resources are conserved in later stages when access control structures are applied to grant view access rights to particular users. Alternative embodiments may implement access control to data views, through the creation and storage of derived views.

Persisted data views supporting access control

A system includes instantiation of a plan generation environment exposing one or more software hooks, each of the one or more software hooks associated with a respective one of a plurality of steps for generating a database table partition redistribution plan, identification, for of the one or more software hooks, of an associated one or more software modules for performing the step associated with the at least one software hook, and execution of the plan generation environment and the identified one or more software modules to generate a database table partition redistribution plan.

Modularized data distribution plan generation

Growing community of inventors

Heidelberg, Germany

Ioannis Kostis