DISTRIBUTED DATABASE ACCESS CONTROL METHOD AND SYSTEM

摘要

The present invention relates to a method of managing access to a database within a distributed system comprising a client device, a server, and the database. The method includes allocating authorities for access to entities within the database to a plurality of principals; generating an authority map from the authorities allocated to the entities for a principal at the client device; transmitting the authority map to the client device; determining operational access to an entity within the database for the principal at the client device using the authority map and using precedence of the authorities allocated to the principal and relevant to the entity; and determining operational access to the entity within the database for the principal at the server or the database based upon precedence of the authorities allocated to the principal and relevant to the entity.