Fast access rights checking of configured structure data
View Patent ↗Methods for product data management and corresponding systems and computer-readable mediums. A method includes receiving a hierarchical data structure that includes a plurality of structure lines referencing persistent data objects and receiving metadata corresponding to persistent data objects referenced by the hierarchical data structure. The method includes computing an access control expression corresponding to each persistent object according to the metadata, wherein the access control expressions are string-representation Boolean expressions, and storing the access control expressions.
1. A method for product data management, the method performed by a data processing system and comprising:
receiving a hierarchical data structure that includes a plurality of structure lines referencing persistent data objects, wherein the hierarchical data structure is a bill of material (BOM) structure and the structure lines are BOM lines;
receiving metadata corresponding to persistent data objects referenced by the BOM lines;
computing an access control expression corresponding to each persistent object referenced by the BOM lines according to the metadata, wherein the access control expressions are string-representation Boolean expressions;
storing in at least one cache table the BOM lines and the access control expressions; and
providing access to portions of the BOM lines to a user based on credentials associated with the user and the access control expressions in the cache table.
2. The method of claim 1 , wherein the data processing system also receives an access request for one or more of the BOM lines from the user and the data processing system grants or denies access to the BOM lines based on the user's credentials and the access control expressions.
3. The method of claim 2 , wherein granting or denying access to the BOM lines based on the user's credentials and the access control expressions includes granting or denying access to specific properties of each BOM line.
4. The method of claim 2 , wherein the data processing system grants or denies access to the BOM lines based on the user's credentials and the access control expressions by evaluating the respective Boolean expressions for the BOM lines against the user's credentials.
5. The method of claim 1 , wherein the at least one cache table includes a Line Table that includes a list of the BOM lines, a Recipe Table that includes a list of recipe objects for each BOM line, and an Access Control Expression Table that includes the access control expressions for the persistent data objects.
6. A data processing system comprising:
a processor; and
an accessible memory, the data processing system particularly configured to
receive a hierarchical data structure that includes a plurality of structure lines referencing persistent data objects, wherein the hierarchical data structure is a bill of material (BOM) structure and the structure lines are BOM lines;
receive metadata corresponding to persistent data objects referenced by the BOM lines;
compute an access control expression corresponding to each persistent object referenced by the BOM lines according to the metadata, wherein the access control expressions are string-representation Boolean expressions;
store in at least one cache table the BOM lines and the access control expressions; and
provide access to portions of the BOM lines to a user based on credentials associated with the user and the access control expressions in the cache table.
7. The data processing system of claim 6 , wherein the data processing system also receives an access request for one or more of the BOM lines from the user and the data processing system grants or denies access to the BOM lines based on the user's credentials and the access control expressions.
8. The data processing system of claim 7 , wherein granting or denying access to the BOM lines based on the user's credentials and the access control expressions includes granting or denying access to specific properties of each BOM line.
9. The data processing system of claim 7 , wherein the data processing system grants or denies access to the BOM lines based on the user's credentials and the access control expressions by evaluating the respective Boolean expressions for the BOM lines against the user's credentials.
10. The data processing system of claim 6 , wherein the at least one cache table includes a Line Table that includes a list of the BOM lines, a Recipe Table that includes a list of recipe objects for each BOM line, and an Access Control Expression Table that includes the access control expressions for the persistent data objects.
11. A non-transitory computer-readable medium encoded with executable instructions that, when executed, cause one or more data processing systems to:
receive a hierarchical data structure that includes a plurality of structure lines referencing persistent data objects, wherein the hierarchical data structure is a bill of material (BOM) structure and the structure lines are BOM lines;
receive metadata corresponding to persistent data objects referenced by the BOM lines;
compute an access control expression corresponding to each persistent object referenced by the BOM lines according to the metadata, wherein the access control expressions are string-representation Boolean expressions;
store in at least one cache table the BOM lines and the access control expressions; and
provide access to portions of the BOM lines to a user based on credentials associated with the user and the access control expressions in the cache table.
12. The computer-readable medium of claim 11 , wherein the data processing system also receives an access request for one or more of the BOM lines from the user and the data processing system grants or denies access to the BOM lines based on the user's credentials and the access control expressions.
13. The computer-readable medium of claim 12 , wherein granting or denying access to the BOM lines based on the user's credentials and the access control expressions includes granting or denying access to specific properties of each BOM line.
14. The computer-readable medium of claim 12 , wherein the data processing system grants or denies access to the BOM lines based on the user's credentials and the access control expressions by evaluating the respective Boolean expressions for the BOM lines against the user's credentials.
15. The computer-readable medium of claim 11 , wherein the at least one cache table includes a Line Table that includes a list of the BOM lines, a Recipe Table that includes a list of recipe objects for each BOM line, and an Access Control Expression Table that includes the access control expressions for the persistent data objects.