Policy based compliance enforcement in a federated graph

Abstract

A method for implementing policy-based compliance enforcement in a federated graph data environment including receiving a query from a query caller for data stored in a graph data storage system, the query including one or more components that are mapped to data entities of the graph data storage system using a schema. The schema expresses connections between data entities of the graph data storage system and includes data classification labels for the data entities of the graph data storage system. Each of the components of the query is examined to identify components to which a policy applies, the identification being done based on the data classification labels. Upon identifying the components, selecting between multiple policy enforcement modes that include reporting violation of the policy, denying query plans in violation of the policy and generating a transformed query plan that complies with the policy. Depending upon the selection, generating the query plan and generating a report that details violation of the policy, preventing execution of the query plan and generating the report that details violation of the policy or generating a transformed query plan.