Methods, systems, and computer-readable storage media for receiving a query request including authorization data and a query, the authorization data indicating a privilege level index, determining a set of row ranges based on the privilege level index and a row range table, the set of row ranges including one or more row ranges having a privilege level associated therewith in the row range table, providing an initial results set including one or more records of a data table that are determined to be responsive, determining a final results set including at least one record of the initial results set, the at least one record being included in the final results set in response to determining that the at least one record is included in a row range of the set of row ranges, and outputting the final results set as at least a portion of a query result.