System for determining direct and indirect user access privileges to data base objects

Claim 2

A computer implemented method for determining the access privileges currently held by a database user with respect to objects in the database, said method comprising the steps of: (a) requesting a determination of those objects to which the given user has access privileges; (b) automatically determining those objects to which the user has direct access privileges; (c) automatically determining those objects to which the user has indirect access privileges, by means of the steps of: (1) automatically determining all access groups to which the user belongs; and (2) automatically determining those objects to which said access groups, determined in step (1) have access privileges; (d) automatically determining the type of access to each object to which said user has access privileges; and (e) automatically determining whether the access privileges for each object to which said user has access privileges may be extended to others; and (f) providing the access privilege information, the type of access together with the respective object, and whether the access privileges may be extended to others, to the user.

Claim 3

The method defined in claim 1, wherein step (c) further comprises the step of automatically determining those objects to which the public has access privileges.

Claim 4

The method defined in claim 1, wherein step (d) includes the step of displaying those objects to which said user has access privileges.

Claim 5

The method defined in claim 1, wherein said requesting step includes the steps of: (1) issuing a command to describe access privileges; (2) stating the type of object to be described; (3) stating the name of the object to be described; and (4) stating the name of a control block that will receive the access privileges information.

Claim 6

The method defined in claim 3, further comprising the step of displaying the associated access group together with those objects to which said access groups have access privileges.

Claim 7

The method defined in claim 1 wherein said type of access include at least one of select, insert, update, delete, drop, alter, index and reference.

Claim 8

The method defined in claim 1, wherein said method is implemented in a non-procedural computer language for use with a plurality of database products.

Claim 9

The method defined in claim 7, wherein said non-procedural language is Structured Query Language (SQL).

Claim 10

The method defined in claim 1, wherein said objects include collections, indices, packages and tables.

Claim 11

The method defined in claim 4, wherein said requesting step includes the step of specifying the type of object for which access privileges are requested.

Claim 12

The method defined in claim 1, wherein said object types include at least one of collections, indices, packages and tables.

Claim 13

A computer implemented method for determining the access privileges currently held by a database user with respect to a given object in a database, said method comprising the steps of: (a) requesting a determination of whether the user has access privileges to the given object; (b) automatically determining whether the user has direct access to the object; (c) automatically determining whether the user has indirect access to the object, by means of the steps of: (1) automatically determining all access groups to which the user belongs; an (2) automatically determining whether one of more of the access groups, determined in step (1) have access privileges to the object; (d) automatically determining the type of access privileges the user has to the object; (e) automatically determining whether the access privileges for the object may be extended to others; and (f) providing the access privilege information, the type of access, and whether the access privileges may be extended to others, to the user.

Claim 14

A computer implemented method for determining the access privileges currently held by a database user with respect to a given object in a database, said method comprising the steps of: (a) requesting a determination of whether the user has access privileges to the given object; (b) automatically determining whether the user has direct access to the object; (c) automatically determining whether the user has indirect access to the object, by means of the steps of: (1) automatically determining all access groups to which the user belongs; an (2) automatically determining whether one of more of the access groups, determined in step (1) have access privileges to the object; (d) automatically determining the type of access privileges the user has to the object; (e) automatically determining whether the access privileges for the object may be extended to others; and (f) providing the access privilege information, the type of access, and whether the access privileges may be extended to others, to the user.

Claim 15

The method described in claim 12, wherein step (c) further comprises the step of automatically determining whether the public has access privileges to the object.

Claim 16

The method defined in claim 12, further comprising the step of displaying the respective access group or groups through which the user has access privileges to the object.

Claim 17

The method defined in claim 12, wherein said requesting step includes the steps of: (1) issuing a command to describe access privileges; (2) stating the type of the given object; (3) stating the name of the object; and (4) stating the name of a control block that will receive the access privileges information.

Claim 18

The method defined in claim 12 wherein said type of access include at least one of select, insert, update, delete, drop, alter, index and reference.

Claim 19

The method defined in claim 12, wherein said method is implemented in a non-procedural computer language for use with a plurality of database products.

Claim 20

The method defined in claim 17, wherein said non-procedural language is Structured Query Language (SQL).

Claim 21

The method defined in claim 12, wherein the given object includes one of collections, indices, packages and tables.

Claim 22

A computer system comprising a database and apparatus for determining the access privileges currently held by a database user with respect to objects in the database; said system comprising in combination: (a) first means for requesting a determination of those objects to which a given user has access privileges; (b) second means for automatically determining those objects to which the user has direct access privileges; (c) third means for automatically determining those objects to which the user has indirect privileges, said third means including: (1) fourth means for automatically determining all access groups to which the user belongs (2) fifth means for automatically determining those objects to which said access groups, determined by said fourth means have access privileges; (d) sixth means for automatically determining the type of access to each object to which said user has access privileges; (e) seventh means for determining whether the access privileges for each object to which said user has access privileges may be extended to others; (f) eight means for providing to the user, access privilege information, as requested by said first means, said type of access together with the respective object, as determined by said sixth means, and whether the access privileges for each object to which said user has access privileges may be extended to others, as determined by said seventh means.

Claim 23

A computer system comprising a database and apparatus for determining the access privileges currently held by a database user with respect to objects in the database; said system comprising in combination: (a) first means for requesting a determination of those objects to which a given user has access privileges; (b) second means for automatically determining those objects to which the user has direct access privileges; (c) third means for automatically determining those objects to which the user has indirect privileges, said third means including: (1) fourth means for automatically determining all access groups to which the user belongs (2) fifth means for automatically determining those objects to which said access groups, determined by said fourth means have access privileges; (d) sixth means for automatically determining the type of access to each object to which said user has access privileges; (e) seventh means for determining whether the access privileges for each object to which said user has access privileges may be extended to others; (f) eight means for providing to the user, access privilege information, as requested by said first means, said type of access together with the respective object, as determined by said sixth means, and whether the access privileges for each object to which said user has access privileges may be extended to others, as determined by said seventh means.

Claim 24

The system defined in claim 20, wherein said third means further comprises means for automatically determining those objects to which the public has access privileges.

Claim 25

The system defined in claim 20, wherein said sixth means comprises means for displaying those objects to which said user has access privileges.

Claim 26

The system defined in claim 20, wherein said first means include means for: (1) issuing a command to describe access privileges; (2) stating the type of object to be described; (3) stating the name of the object to be described; and (4) stating the name of a control block that will receive the access privileges information.

Claim 27

The system defined in claim 22, further comprising means for displaying the associated access group together with those objects to which said access groups have access privileges.

Claim 28

The system defined in claim 20, wherein said type of access include at least one of select, insert, update, delete, drop, alter, index and reference.

Claim 29

The system defined in claim 20, wherein said first, second and third means execute a non-procedural computer language for use with a plurality of database products.

Claim 30

The system defined in claim 26, wherein said non-procedural language is Structured Query Language (SQL).

Claim 31

The system defined in claim 20, wherein said objects include collections, indices, packages and tables.

Claim 32

The system defined in claim 23, wherein said first means includes means for specifying the type of object for which access privileges are requested.

Claim 33

The system defined in claim 20, wherein said object types include at least one of collections, indices, packages and tables.

Claim 34

A computer system comprising a database and apparatus for determining the access privileges currently held by a database user with respect to objects in the database; said system comprising in combination: (a) first means for requesting a determination of whether the user has access privileges to the given object; (b) second means for automatically determining whether the user has direct access to the object; (c) third means for automatically determining whether the user has indirect access to the object, said third means including: (1) fourth means for automatically determining all access groups to which the user belongs; (2) fifth means for automatically determining whether one of more of the access groups, determined in said fourth means, have access privileges to the object; (d) sixth means for automatically determining the type of access privileges the user has to the object; (e) seventh means for determining whether the access privileges for the object may be extended to others; (f) eighth means for providing to the user, access privilege to the given object information, as requested by said first means, said type of access together with the respective object, as determined by said sixth means, and whether the access privileges for each object to which said user has access privileges may be extended to others, as determined by said seventh means.

Claim 35

A computer system comprising a database and apparatus for determining the access privileges currently held by a database user with respect to objects in the database; said system comprising in combination: (a) first means for requesting a determination of whether the user has access privileges to the given object; (b) second means for automatically determining whether the user has direct access to the object; (c) third means for automatically determining whether the user has indirect access to the object, said third means including: (1) fourth means for automatically determining all access groups to which the user belongs; (2) fifth means for automatically determining whether one of more of the access groups, determined in said fourth means, have access privileges to the object; (d) sixth means for automatically determining the type of access privileges the user has to the object; (e) seventh means for determining whether the access privileges for the object may be extended to others; (f) eighth means for providing to the user, access privilege to the given object information, as requested by said first means, said type of access together with the respective object, as determined by said sixth means, and whether the access privileges for each object to which said user has access privileges may be extended to others, as determined by said seventh means.

Claim 36

The system described in claim 31, wherein said third means further comprises means for automatically determining whether the public has access privileges to the object.

Claim 37

The system defined in claim 31, further comprising means for displaying the respective access group or groups through which the user has access privileges to the object.

Claim 38

The system defined in claim 31, wherein said first means include means for: (1) issuing a command to describe access privileges; (2) stating the type of the given object; (3) stating the name of the object; and (4) stating the name of a control block that will receive the access privileges information.

Claim 39

The system defined in claim 31, wherein said type of access include at least one of select, insert, update, delete, drop, alter, index and reference.

Claim 40

The system defined in claim 31, wherein said first, second and third means execute a non-procedural computer language for use with a plurality of database products.

Claim 41

The system defined in claim 36, wherein said non-procedural language is Structured Query Language (SQL).

Claim 42

The system defined in claim 31, wherein the given object includes one of collections, indices, packages and tables.