Providing matching security between data stores in a database system

Abstract

Methods, systems, and devices for providing matching security between data stores are described. In a database system, an operational data store may store transactional datasets and an analytical data store may store analytics datasets generated based on the transactional datasets. For these analytics datasets to efficiently inherit the security configurations of the transactional datasets, security information may be embedded in datasets retrieved from the operational data store during a data acquisition procedure. This security information may be converted into an embedded multiple-value field for storage in the analytical data store. The analytical data store may receive a query for data in a dataset, and may determine security descriptors associated with the user sending the query. The analytical data store may then filter the data based on comparing these determined security descriptors with the security information in the multiple-value field, and may transmit a query response with the filtered data.