7. A method comprising: determining by a hardware processor that one or more users, groups, or both are provided access to one or more records at a certain access level for a database system in a computing environment; determining by the hardware processor whether an entry in a share table of an entity includes an existing security descriptor in a share table of an entity includes the one or more users, groups, or both at the certain access level, wherein each unique set of users, groups, or both having a same access level to one or more records in a set of records is associated with a same security descriptor in a sharing table for each of the one or more records; if an entry in a share table of an entity includes an existing security descriptor for the one or more users, groups, or both at the certain access level, then modifying, with the hardware processor, the entry to include the one or more records; and if the share table does not include an existing security descriptor for the one or more users, groups, or both at the certain access level, then generating, with the hardware processor, a new security descriptor and modifying the share table to include the new security descriptor.
9. The method of claim 7 , further comprising indexing the new security descriptor based upon the one or more users.