IMPROVED ACCESS CONTROL MECHANISM FOR DATABASES

摘要

The present invention relates to a method for access control of a database by a principal, comprising: granting authorities for entities within the database to the principal; denying authorities for entities within the database to the principal; and determining operational access to an entity for the principal based upon the interaction of authorities granted and denied to the principal and relevant to the entity. A system for access control is also disclosed.