Key-Based Access Control for Multi-Tenant Database Tables
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional database systems face challenges in securely controlling access to custom objects, particularly in multi-tenant environments, where unauthorized users can access private data due to the ability to submit queries and view all results, compromising both security and efficiency.
Innovation Solution
Implementing a key-based system to control access to custom objects by identifying the appropriate key for a requested custom object, searching only the relevant portion of the custom entity share table for access information, and determining user permissions, ensuring that only authorized data is accessed and returned to the user.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If conventional database systems allow users to submit queries and view all results, then data accessibility is improved, but security deteriorates as unauthorized users can access private data
Solution Approach 1:
The patent segments the custom entity share table into multiple portions using keys. Each key corresponds to a specific custom object, allowing the system to divide the large table into smaller, manageable segments. This segmentation enables efficient access control by searching only relevant portions rather than the entire table, thus maintaining security while preserving data accessibility.
Solution Approach 2:
The patent introduces keys as intermediary elements between users and the custom entity share table. These keys act as mediators that enable the system to identify and access only the specific portions of the table relevant to the user's authorization level, preventing unauthorized access while allowing legitimate data retrieval.
2Reliability
If the entire custom entity share table is searched for access information, then comprehensive access control is achieved, but query efficiency deteriorates
Solution Approach 1:
The custom entity share table is segmented into multiple portions based on keys associated with different custom objects. When a user requests access information, the system searches only the relevant portion of the table corresponding to the specific custom object, rather than scanning the entire table. This segmentation dramatically improves query efficiency while maintaining comprehensive access control through the key-based identification system.
Solution Approach 2:
The patent applies local quality by making different portions of the custom entity share table searchable based on specific keys. Each portion of the table is optimized for accessing information about particular custom objects, allowing the system to quickly locate relevant access information without processing unrelated data, thus improving overall query performance.
3Productivity
If multiple tenants store data in a common table, then resource utilization is improved, but security complexity increases
Solution Approach 1:
The patent segments the common custom entity share table using tenant-specific keys. Each tenant's data is logically separated into distinct portions identified by their unique keys. This segmentation allows multiple tenants to efficiently share the same physical table infrastructure while maintaining clear security boundaries, thus reducing security complexity despite high resource utilization.
Solution Approach 2:
The common custom entity share table serves multiple functions: it stores data for multiple tenants, enables efficient key-based access control, and provides a unified infrastructure for resource sharing. The key-based access mechanism universally applies to all tenants, simplifying security management across the multi-tenant environment while maintaining high resource utilization.
Data Source
AI summary
In embodiments, methods and systems for controlling access to custom objects are provided. These techniques for controlling access to custom objects can enable embodiments to utilize a key for the protection of the security of data that is to remain private while not compromising efficiency of a query. The key for a requested custom object is identified and then used so that only an appropriate portion of a custom entity share table is searched to locate access information. It is then determined whether the user can access at least a portion of the custom object, and the appropriate and allowed data is sent to the user.