International Business Machines Corporation

Rupa Bhaghavan

Kenneth Carlin Nelson

Randal James Richardt

Tawei Hu

Nicholas K Puz

Wayne Frederick Miller

Fang-Yi Wang

Sharon McKenna Sanders

Vitaliy Bondar

Various embodiments of a method, apparatus and article of manufacture provide a decision point in a workflow system comprising a server and at least a first client work node. A decision point work node is provided at the server. A SQL expression which is associated with the decision point work node and the first client work node is generated. The server determines whether to route a work package to the first client work node based on the SQL expression.

Use of generated SQL for evaluation of decision point rules in a workflow system

A system to generate an SQL sub-expression that implement access control rules stored in a library server. The SQL sub-expression is then merged with the SQL passed from an application program interface (API). The access control checking mechanism is implemented on the server side of the content management system. In this client/server environment, the query SQL statement is built in two layers: the API (client) layer and the server layer. The API sends the query string to the underlying stored procedure. The stored procedure then generates the access control logic based on the configuration parameters of the library server. This access control logic is dynamically added to the query string sent by the API. The stored procedure prepares, builds and executes this new query string as a dynamic SQL statement.

Implementing access control for queries to a content management system

A method to generate an SQL sub-expression that implement access control rules stored in a library server. The SQL sub-expression is then merged with the SQL passed from an application program interface (API). The access control checking mechanism is implemented on the server side of the content management system. In this client/server environment, the query SQL statement is built in two layers: the API (client) layer and the server layer. The API sends the query string to the underlying stored procedure. The stored procedure then generates the access control logic based on the configuration parameters of the library server. This access control logic is dynamically added to the query string sent by the API. The stored procedure prepares, builds and executes this new query string as a dynamic SQL statement.

Method for implementing access control for queries to a content management system

A method, system and article of manufacture for two phase intermediate query security using access control. A networked client-server computer system having a plurality of users of the client-server system and including software performing database queries via a DBMS for users of the system implements the method. The method includes receiving a query string from one of the users by the client system, the query string including references to database objects. The received query string is transformed by the client system to an intermediate query string, and a first phase query security is performed by the client system including identifying the referenced database objects and inserting a security marker into the intermediate query string for each respective identified database object, and sending the intermediate query string to the server system. Access control checks are performed by the server system on the inserted security markers in the intermediate query string, and the inserted security markers are replaced with corresponding DBMS code to enforce access control.

Growing community of inventors

San Jose, CA, United States of America

Rupa Bhaghavan