US Patent 11188661 Semi-rule based high performance permission management

Described herein includes a permission management system that optimizes determination of whether a user has permission to perform an operation using an attribute table. The system may include a permission processor for: determining whether the requesting user has permission to perform the operation, the determining including: generating an attribute table comprising the one or more target users and one or more user attributes, the one or more user attributes comprising metadata associated with the one or more target users; storing the attribute table on the database; generating a reduced attribute table, the generating comprising removing one or more target users from the attribute table; and applying the one or more permission rules to each of the target users remaining in the reduced attribute table.