-
公开(公告)号:US20240427924A1
公开(公告)日:2024-12-26
申请号:US18823014
申请日:2024-09-03
Applicant: Snowflake Inc.
Inventor: Raja Suresh Krishna Balakrishnan , Khalid Zaman Bijon , Subramanian Muralidhar , David Schultz , Jian Xu
IPC: G06F21/62
Abstract: Systems and methods for managing column hiding are provided. The systems and methods receive, from a client device, a query associated with a table. The systems and methods determine an access restriction associated with the client device. The systems and methods identify a column of the table that is restricted by the access restriction associated with the client device. In response to identifying the column of the table that is restricted by the access restriction associated with the client device, the systems and methods provide a result of the query that excludes data corresponding to the column.
-
公开(公告)号:US20240419828A1
公开(公告)日:2024-12-19
申请号:US18394531
申请日:2023-12-22
Applicant: Snowflake Inc.
Inventor: Raja Suresh Krishna Balakrishnan , Jashua Gupta , Jian Xu
IPC: G06F21/62
Abstract: Methods of referencing row access policy (RAP) protected mapping tables in a RAP for a data table are disclosed herein. An example method of referencing a mapping table in a data table using nested RAP includes defining, by a processing device, a first access policy for the mapping table to control access by specific users or under specific conditions. The processing device further defines a second access policy attached to the data table referencing the mapping table. The processing device in response to a query, executes the second access policy of the data table to provide a response or operation of data associated with the data table and the mapping table. Executing the second access policy invokes executing the first access policy of the mapping table. The executing of both the second access policy of the data table and the first access policy of the mapping table are recorded.
-
公开(公告)号:US20240403276A1
公开(公告)日:2024-12-05
申请号:US18326158
申请日:2023-05-31
Applicant: Snowflake Inc.
Inventor: Hossein Ahmadi , Raja Suresh Krishna Balakrishnan , David Schultz , Jian Xu , Yunqiao Zhang
IPC: G06F16/215 , G06F16/22
Abstract: Described herein are techniques for data quality monitoring in a network-based data system. A data metric function used to evaluate data quality can be stored, where the data metric function is defined as schema level object. The data metric function can be attached to a table associated with an account and is evaluated on data associates with the table to generate evaluation results. The evaluation results can be stored in an account-specific central database, from which access is provided to the evaluation results to a user for the account.
-
公开(公告)号:US20240168946A1
公开(公告)日:2024-05-23
申请号:US18428371
申请日:2024-01-31
Applicant: Snowflake Inc.
Inventor: Raja Suresh Krishna Balakrishnan , Khalid Zaman Bijon , Subramanian Muralidhar , David Schultz , Jian Xu
IPC: G06F16/242 , G06F16/21 , G06F16/22 , G06F16/23 , G06F16/2453
CPC classification number: G06F16/2445 , G06F16/211 , G06F16/2291 , G06F16/2358 , G06F16/2365 , G06F16/2453
Abstract: Aspects of the present disclosure address systems, methods, and devices for tracking object dependencies in a cloud database system. An object dependency created between a referencing object and a referenced object is detected. Based on detecting the object dependency, a dependency record is generated. The dependency record includes dependency information describing the object dependency between the reference object and the referenced object. The dependency record is stored in a database of dependency records.
-
公开(公告)号:US11928108B2
公开(公告)日:2024-03-12
申请号:US18181423
申请日:2023-03-09
Applicant: Snowflake Inc.
Inventor: Raja Suresh Krishna Balakrishnan , Khalid Zaman Bijon , Subramanian Muralidhar , David Schultz , Jian Xu
IPC: G06F16/242 , G06F16/21 , G06F16/22 , G06F16/23 , G06F16/2453
CPC classification number: G06F16/2445 , G06F16/211 , G06F16/2291 , G06F16/2358 , G06F16/2365 , G06F16/2453
Abstract: Aspects of the present disclosure address systems, methods, and devices for tracking object dependencies in a cloud database system. An object dependency created between a referencing object and a referenced object is detected. Based on detecting the object dependency, a dependency record is generated. The dependency record includes dependency information describing the object dependency between the reference object and the referenced object. The dependency record is stored in a database of dependency records.
-
公开(公告)号:US11727139B2
公开(公告)日:2023-08-15
申请号:US17936681
申请日:2022-09-29
Applicant: Snowflake Inc.
Inventor: Artin Avanes , Khalid Zaman Bijon , Zheng Mi , Subramanian Muralidhar , David Schultz , Jian Xu
CPC classification number: G06F21/6227 , G06F16/2282 , G06F21/604 , G06F21/62 , G06F21/6218 , G06F2221/2141
Abstract: Row-level security (RLS) may provide fine-grained access control based on flexible, user-defined access policies to databases, tables, objects, and other data structures. A RLS policy may be an entity or object that defines rules for row access. A RLS policy may be decoupled or independent from any specific table. This allows more robust and flexible control. A RLS policy may then be attached to one or more tables. The RLS policy may include a Boolean-valued expression.
-
公开(公告)号:US20230214383A1
公开(公告)日:2023-07-06
申请号:US18181423
申请日:2023-03-09
Applicant: Snowflake Inc.
Inventor: Raja Suresh Krishna Balakrishnan , Khalid Zaman Bijon , Subramanian Muralidhar , David Schultz , Jian Xu
IPC: G06F16/23
CPC classification number: G06F16/2365 , G06F16/2358
Abstract: Aspects of the present disclosure address systems, methods, and devices for tracking object dependencies in a cloud database system. An object dependency created between a referencing object and a referenced object is detected. Based on detecting the object dependency, a dependency record is generated. The dependency record includes dependency information describing the object dependency between the reference object and the referenced object. The dependency record is stored in a database of dependency records.
-
公开(公告)号:US11645275B2
公开(公告)日:2023-05-09
申请号:US17659797
申请日:2022-04-19
Applicant: Snowflake Inc.
Inventor: Raja Suresh Krishna Balakrishnan , Khalid Zaman Bijon , Subramanian Muralidhar , David Schultz , Jian Xu
IPC: G06F16/242 , G06F16/23 , G06F16/2453 , G06F16/21 , G06F16/22
CPC classification number: G06F16/2445 , G06F16/211 , G06F16/2291 , G06F16/2358 , G06F16/2453
Abstract: Aspects of the present disclosure address systems, methods, and devices for tracking object dependencies in a cloud database system. An object dependency created between a referencing object and a referenced object is detected. Based on detecting the object dependency, a dependency record is generated. The dependency record includes dependency information describing the object dependency between the reference object and the referenced object. The dependency record is stored in a database of dependency records.
-
公开(公告)号:US20230022027A1
公开(公告)日:2023-01-26
申请号:US17936681
申请日:2022-09-29
Applicant: Snowflake Inc.
Inventor: Artin Avanes , Khalid Zaman Bijon , Zheng Mi , Subramanian Muralidhar , David Schultz , Jian Xu
Abstract: Row-level security (RLS) may provide fine-grained access control based on flexible, user-defined access policies to databases, tables, objects, and other data structures. A RLS policy may be an entity or object that defines rules for row access. A RLS policy may be decoupled or independent from any specific table. This allows more robust and flexible control. A RLS policy may then be attached to one or more tables. The RLS policy may include a Boolean-valued expression.
-
公开(公告)号:US12259991B2
公开(公告)日:2025-03-25
申请号:US18394531
申请日:2023-12-22
Applicant: Snowflake Inc.
Inventor: Raja Suresh Krishna Balakrishnan , Jashua Gupta , Jian Xu
IPC: G06F21/62
Abstract: Methods of referencing row access policy (RAP) protected mapping tables in a RAP for a data table are disclosed herein. An example method of referencing a mapping table in a data table using nested RAP includes defining, by a processing device, a first access policy for the mapping table to control access by specific users or under specific conditions. The processing device further defines a second access policy attached to the data table referencing the mapping table. The processing device in response to a query, executes the second access policy of the data table to provide a response or operation of data associated with the data table and the mapping table. Executing the second access policy invokes executing the first access policy of the mapping table. The executing of both the second access policy of the data table and the first access policy of the mapping table are recorded.
-
-
-
-
-
-
-
-
-