"Time Governed Database Access Controls

Disclosed is the method to solve the current problems with grant privileges, grant role privileges with in database product. By having the self expired and system managed “Grant”, Grant Role” privileges will help database DBA to manage objects level privileges in better way.

Page 1 of 2

"Time Governed Database Access Controls

Inventor -Bhaveshkumar R Patel

IBM

Time Governed Database Access Controls

This invention solves one of the current problems with the privileges granted in an SQL-based DBMS, namely that a privilege cannot be granted for a limited period of time without manual intervention to remove the privilege.

An important - even critical - part of managing any database is managing the privileges given to users for manipulating objects with the database. In all SQL DBMS, a suitably privileged user (typically, a DBA) manually grants and revokes the privileges.

Sometimes, it is desirable to be able to grant privileges to a user for a limited period of time. Currently, this requires the DBA to revoke the privileges manually at the time when the privilege expires. This invention permits the DBMS to revoke privileges automatically if the DBA sets the time when the privilege expires.

In today's world, Total Cost of Ownership (TCO) is very important to customers. To reduce the TCO, many costly systems are shared by multiple users (for example, mainframe computers are shared across multiple users and customers), and hundreds or thousands of users may connect at the same time to the system and the databases. It is difficult for a DBA to keep track of and revoke user privileges manually.

Proposal:

This proposal adds a small extension to the current SQL standard - ISO/IEC 9075-2:2003 SQL/Foundation.

By havin...