US 12,235,985 B2
Privilege based access checks for query results
Damien Carru, New York, NY (US); Thierry Cruanes, San Mateo, CA (US); Subramanian Muralidhar, Mercer Island, WA (US); Nicola Dan Onose, San Jose, CA (US); Ryan Michael Thomas Shelly, San Francisco, CA (US); Brian Smith, Hillsborough, CA (US); and Jaeyun Noh, Sunnyvale, CA (US)
Assigned to Snowflake Inc., Bozeman, MT (US)
Filed by Snowflake Inc., Bozeman, MT (US)
Filed on Jul. 26, 2023, as Appl. No. 18/359,360.
Application 18/359,360 is a continuation of application No. 18/048,560, filed on Oct. 21, 2022, granted, now 11,816,239.
Application 18/048,560 is a continuation of application No. 17/586,646, filed on Jan. 27, 2022, granted, now 11,507,685.
Application 17/586,646 is a continuation of application No. 17/487,716, filed on Sep. 28, 2021, granted, now 11,270,020.
Prior Publication US 2023/0367896 A1, Nov. 16, 2023
This patent is subject to a terminal disclaimer.
Int. Cl. G06F 21/00 (2013.01); G06F 16/245 (2019.01); G06F 16/248 (2019.01); G06F 21/62 (2013.01); H04L 9/32 (2006.01); H04L 9/40 (2022.01)
CPC G06F 21/6227 (2013.01) [G06F 16/245 (2019.01); G06F 16/248 (2019.01); H04L 9/3213 (2013.01); H04L 63/102 (2013.01); H04L 63/105 (2013.01)] 24 Claims
OG exemplary drawing
 
1. A method comprising:
receiving a query from a first user in a network-based data system;
collecting object identifiers of objects referenced in the query;
executing the query to generate query results;
storing information regarding the collected object identifiers referenced in the query;
storing the query results in the network-based data system for sharing with other users;
receiving a request to access the stored query results from a second user in the network-based data system, the request comprising a security token including a job ID associated with the query;
retrieving the stored information regarding the collected object identifiers in response to receiving the request to access the stored query results;
performing privilege check of the second user to confirm that second user has access permission to access the stored query results using the stored information regarding the collected object identifiers; and
granting access to the second user for the stored query results.