| CPC G06F 16/90335 (2019.01) | 30 Claims |
|
1. A method comprising:
receiving, from a consumer account, a first query directed towards a shared dataset of a provider account, the first query identifying a first operation and including available values specifying data that is accessible to the consumer account by query requests;
accessing a first set of data from the shared dataset to perform the first operation, the first set of data including data accessed from a first column of the shared dataset;
determining, by at least one hardware processor, that the provider account attached a projection constraint policy to the first column, the projection constraint policy restricting output of data values, to the consumer account, stored in the first column;
determining, based on a context of the first query, that the projection constraint policy should be enforced in relation to the first query;
enforcing the projection constraint policy in relation to the first query, the enforcing comprising enabling the consumer account to perform the first operation on the data values stored in the first column while maintaining confidentiality of the data values; and
generating an output to the first query based on the first set of data and the first operation, the output to the first query maintaining the confidentiality of the data values by not including the data values stored in the first column based on enforcing the projection constraint policy in relation to the first query.
|