US 12,235,988 B2
Deriving and augmenting access control for data lakes
Peter Eberlein, Malsch (DE); and Volker Driesen, Heidelberg (DE)
Assigned to SAP SE, Walldorf (DE)
Filed by SAP SE, Walldorf (DE)
Filed on Jun. 14, 2023, as Appl. No. 18/209,714.
Application 18/209,714 is a continuation of application No. 16/566,321, filed on Sep. 10, 2019, granted, now 11,704,430.
Prior Publication US 2023/0394167 A1, Dec. 7, 2023
This patent is subject to a terminal disclaimer.
Int. Cl. G06F 21/62 (2013.01); G06F 16/11 (2019.01); G06F 16/13 (2019.01)
CPC G06F 21/6236 (2013.01) [G06F 16/125 (2019.01); G06F 16/13 (2019.01); G06F 2221/2141 (2013.01)] 20 Claims
OG exemplary drawing
 
1. A system comprising:
at least one hardware processor; and
a computer-readable medium storing instructions that, when executed by the at least one hardware processor, cause the at least one hardware processor to perform operations comprising:
for data replicated from a source system to a data lake, replicating access control information regarding the replicated data;
storing the replicated access control information in the data lake with the replicated data;
identifying linkages between data objects in the replicated data;
storing the linkages in the data lake;
in response to a request from a first user to access a data object, in the replicated data in the data lake, to which the first user has not been granted access in the access control information, determining whether the first user is allowed to access the data object based on the stored linkages; and
in response to a determination that the first user is allowed to access the data object based on the stored linkages, retrieving the data object.