US 11,741,100 B2
Providing matching security between data stores in a database system
Donovan Schneider, San Francisco, CA (US); Keith Kelly, Walnut Creek, CA (US); and Nicholas Albert Bugajski, Mountain View, CA (US)
Assigned to Salesforce, Inc., San Francisco, CA (US)
Filed by Salesforce, Inc., San Francisco, CA (US)
Filed on Apr. 1, 2021, as Appl. No. 17/220,589.
Application 17/220,589 is a continuation of application No. 15/971,545, filed on May 4, 2018, granted, now 10,990,593.
Prior Publication US 2021/0224276 A1, Jul. 22, 2021
This patent is subject to a terminal disclaimer.
Int. Cl. G06F 16/20 (2019.01); G06F 16/2453 (2019.01); G06F 16/25 (2019.01); G06F 16/22 (2019.01); G06F 16/242 (2019.01); G06F 16/9535 (2019.01)
CPC G06F 16/24542 (2019.01) [G06F 16/2228 (2019.01); G06F 16/2428 (2019.01); G06F 16/258 (2019.01); G06F 16/9535 (2019.01)] 20 Claims
OG exemplary drawing
 
1. A method, at an operational data store, for providing security descriptors from the operational data store to an analytical data store, comprising:
receiving, at the operational data store and from the analytical data store, a data acquisition request for one or more fields of a first dataset stored in memory of the operational data store, wherein the first dataset comprises a plurality of data objects storing respective values for fields of the one or more fields;
identifying a set of security descriptors corresponding to each data object of the plurality of data objects of the first dataset based at least in part on the data acquisition request;
generating a multiple-value field representing the identified set of security descriptors corresponding to the each data object;
embedding the multiple-value field with the one or more fields in an aggregate dataset; and
transmitting, from the operational data store and to the analytical data store in response to the data acquisition request, the aggregate dataset comprising the one or more fields and the embedded multiple-value field, the aggregate dataset configured to support filtering query results based at least in part on an association between user information for a user device originating a query and the embedded multiple-value field.