Microsoft Technology Licensing, LLC

Sizheng Chen

Mahmood Gulam Qadir

Pritvinath Obla

Yi Miao

Pierre N Martin

Vishal Mishra

Anubhuti Manohar

The described implementations relate to an access control framework for a database system. One implementation can receive, from a user, a request for data that identifies a resource, such as a view that obtains data from a database. The implementation can check the identity of the user to identify user roles associated with the user. The implementation can identify an access policy that is associated with the resource, and a rule that is associated with the access policy and applies to the user roles associated with the user. The rule can be applied to the request for data using attributes of the access policy. For example, if the request for data is a query on a view, the query can be rewritten to apply the rule.

Growing community of inventors

Redmond, WA, United States of America

Sizheng Chen