Microsoft Technology Licensing, LLC

Pierre N Martin

Mahmood Gulam Qadir

Pritvinath Obla

Yi Miao

Anubhuti Manohar

Vishal Mishra

Sizheng Chen

Stephane Plante

Vijay Gajjala

Bryan Dove

Timothy Arthur Gill

James T Jacoby

Craig Alan Gick

Ajay S Kang

Richard K Costleigh

Luke Jared Lenhart

Craig A Gick

The described implementations relate to an access control framework for a database system. One implementation can receive, from a user, a request for data that identifies a resource, such as a view that obtains data from a database. The implementation can check the identity of the user to identify user roles associated with the user. The implementation can identify an access policy that is associated with the resource, and a rule that is associated with the access policy and applies to the user roles associated with the user. The rule can be applied to the request for data using attributes of the access policy. For example, if the request for data is a query on a view, the query can be rewritten to apply the rule.

Access control framework

Embodiments are disclosed for managing and providing access to a collection of digital resources. One embodiment provides a method comprising receiving a request to access a resource for a principal and determining one or more principal groups to which the principal belongs. The method further comprises obtaining resource set membership information indicating a resource set to which the resource belongs, and obtaining resource set access policy information for the resource set to which the resource belongs. The method yet further comprises determining whether the principal is allowed to access the resource based on the principal group membership information and the resource set access policy information, and, if the principal is allowed to access the resource, then permitting access to the resource by the principal.

Discretionary policy management in cloud-based environment

The described implementations relate to synchronizing records between databases. One implementation can cause historical data of a source database to be recorded as entries on a transaction log and can subsequently cause new data of the source database to be recorded on the transaction log in a same manner as the historical data. This implementation can also identify a distinct attribute associated with an individual entry and generate a message that reflects the individual entry.

Synchronizing records between databases

Growing community of inventors

Seattle, WA, United States of America

Pierre N Martin