US 11,789,911 B1
Scalable permissions management for granular levels of database access
Vamshi Krishna Surabhi, Redmond, WA (US); and Dinesh Thangaraju, Bothell, WA (US)
Assigned to Amazon Technologies, Inc., Seattle, WA (US)
Filed by Amazon Technologies, Inc., Seattle, WA (US)
Filed on Jul. 27, 2021, as Appl. No. 17/386,349.
Int. Cl. G06F 16/21 (2019.01); G06F 16/25 (2019.01); G06F 21/60 (2013.01); G06F 21/62 (2013.01)
CPC G06F 16/21 (2019.01) [G06F 16/256 (2019.01); G06F 21/602 (2013.01); G06F 21/6227 (2013.01)] 20 Claims
OG exemplary drawing
 
1. A system, comprising:
one or more processors; and
one or more memories, wherein the one or more memories have stored thereon instructions, which when executed by the one or more processors of a provider network, cause the one or more processors to:
implement a permissions management service, wherein the permissions management service is configured to, for individual users of a plurality of users registered with a database service:
receive, from a data owner, specification of a plurality of tables of at least one database of the database service to be available for the user to request access to;
subsequent to the reception of the specification of the plurality of tables, receive a request from a user;
authenticate the user;
subsequent to the authentication of the user, determine, based on the specification from the data owner, the plurality of tables to be available for the user to request access to;
based on the determination of the plurality of tables to be available for the user to request access to, provide, by the permissions management service to a user interface, an indication of the plurality of tables that are available for the user to request access to;
receive, from the user via user input, a selection of one or more tables from among the plurality of tables indicated by the permissions management service to the user interface as available for the user to request access to; and
based on the selection received from the user of the one or more tables, send to the database service an access request that comprises an indication of the one or more tables, wherein the permissions management service determines whether approval is to be obtained for the one or more tables before the sending of the access request; and
implement the database service, wherein the database service is configured to:
receive the access request form the permissions management service; and
based on the reception of the access request, grant to the user permission to access the one or more tables of the at least one database.