1. A computer-implemented method, including: determining whether to grant a user access to a database object via a first set of access control paths that do not rely on whether the user has permission to access via a minimum number of parent objects of the database object, wherein a definition of the database object allows the database object to have multiple parent objects; and then responsive to a determination not to grant the user access via the first set of access control paths, determining whether to grant the user access to the database object via a second set of access control paths that determine whether the user has permission to access to the minimum number of parent objects of the database object.