Column based data access controls

1. A system comprising:

a memory storing processor-executable instructions; and

a processor to execute the processor-executable instructions to cause the system to:

receive a query specifying a result set of data from at least one database table;

determine whether at least one column of the at least one database table is subject to a column-based authorization restriction, the column-based authorization restriction to restrict access to the at least one column of the at least one database table being based on a column from a database table other than the least one database table including the at least one column;

modify the query, in an instance it is determined that at least one column of the at least one database table is subject to a column-based authorization restriction, to restrict the result set of data in accordance with the column-based authorization restriction;

execute, in response to the modifying of the query, the modified query;

execute, in an instance it is determined that at least one column of the at least one database table is not subject to a column-based authorization restriction, the query; and

save a record of the result of the execution of one of the modified query and the query in a memory.

2. The system of claim 1 , wherein the determination of whether at least one column of the at least one database table is subject to a column-based authorization restriction and the modification of the query is invoked by a database engine of a database instance.

3. The system of claim 1 , wherein the column-based authorization restriction to the at least one column of the at least one database table is based on access rights specified in a different restricting column.

4. The system of claim 1 , wherein the column-based authorization restriction to the at least one column of the at least one database table is specified by a data item in at least one database table, at least one data item external to a database table, and a combination thereof.

5. The system of claim 1 , wherein the result set of data from at least one database table is represented by a database view.

6. A computer-implemented method, the method comprising:

receiving, by a processor from a data consumer, a query specifying a result set of data from at least one database table;

determining, by the processor, whether at least one column of the at least one database table is subject to a column-based authorization restriction, the column-based authorization restriction to restrict access to the at least one column of the at least one database table being based on a column from a database table other than the least one database table including the at least one column;

modifying, by the processor in an instance it is determined that at least one column of the at least one database table is subject to a column-based authorization restriction, query to restrict the result set of data in accordance with the column-based authorization restriction;

executing, by the processor in response to the modifying of the query, the modified query;

executing, in an instance it is determined that at least one column of the at least one database table is not subject to a column-based authorization restriction, the query; and

saving a record of the result of the execution of the one of the modified query and the query in a memory.

7. The method of claim 6 , wherein the determination of whether at least one column of the at least one database table is subject to a column-based authorization restriction and the modification of the query is invoked by a database engine of a database instance.

8. The method of claim 6 , wherein the column-based authorization restriction to the at least one column of the at least one database table is based on a value in a different restricting column.

9. The method of claim 6 , wherein the column-based authorization restriction to the at least one column of the at least one database table is specified by a data item in at least one database table, at least one data item external to a database table, and a combination thereof.

10. The method of claim 6 , wherein the result set of data from at least one database table is represented by a database view.

11. A non-transitory computer-readable medium storing program code, the program code executable by a processor of a computing system to cause the computing system to:

receive a query specifying a result set of data from at least one database table;

determine whether at least one column of the at least one database table is subject to a column-based authorization restriction, the column-based authorization restriction to restrict access to the at least one column of the at least one database table being based on a column from a database table other than the least one database table including the at least one column;

modify the query, in an instance it is determined that at least one column of the at least one database table is subject to a column-based authorization restriction, to restrict the result set of data in accordance with the column-based authorization restriction;

execute, in response to the modifying of the query, the modified query;

execute, in an instance it is determined that at least one column of the at least one database table is not subject to a column-based authorization restriction, the query; and

save a record of the result of the execution of the one of the modified query and the query in a memory.

12. The medium of claim 11 , wherein the determination of whether at least one column of the at least one database table is subject to a column-based authorization restriction and the modification of the query is invoked by a database engine of a database instance.

13. The medium of claim 11 , wherein the column-based authorization restriction to the at least one column of the at least one database table is based on access rights specified in a different restricting column.

14. The medium of claim 11 , wherein the column-based authorization restriction to the at least one column of the at least one database table is specified by a data item in at least one database table, at least one data item external to a database table, and a combination thereof.

15. The medium of claim 11 , wherein the result set of data from at least one database table is represented by a database view.