Abstract: A method of provisioning organization users in a multi-tenant database system includes receiving a request via a single sign-on protocol from an organization user to create a new multi-tenant database user account for access to the multi-tenant database system. The method retrieves rules that specify how to derive user permissions for access to the multi-tenant database system from stored user attributes of the organization user. The method continues with applying the rules to the stored user attributes to determine permissions for the users to access particular objects in the multi-tenant database system, and creating the new user account with the determined user permissions for access to the multi-tenant database system.

Abstract: Database systems and related customization methods are provided. One exemplary method of modifying a database to support a new functionality involves receiving user input indicative of the new functionality from a client device coupled to a network, identifying existing customizations associated with a user of the client device in the database, determining a plurality of different solutions for implementing the new functionality based at least in part on the existing customizations associated with the user, providing a graphical user interface display at the client device including graphical indicia of the plurality of different solutions for implementing the new functionality, and in response to receiving indication of a selected solution of the plurality of different solutions from the client device, automatically instantiating a new customization corresponding to the selected solution in the database.

Abstract: Computing systems, database systems, and related conversational updating methods are provided for dynamically updating graphical user interfaces responsive to conversational user inputs received via a chatbot or other conversational interactions with a user.

Abstract: Examples are described herein that relate to determining a level of relatedness between datasets. An approximation can be made of whether an entry in a first dataset appears in a same row as an entry in a second dataset. The approximation can be made by grouping entries in the second dataset together and determining an occurrence that an entry occurs in a same row as any of the entries in a grouping of entries. A test of independence between datasets can be made based at least on the occurrence values. Datasets can be ranked according to level of independence and presented to a user as candidates to join with a dataset. Occurrence values or rankings can be precomputed and available for use so that join candidates can be presented with a little amount of perceived delay to a user. A user interface can present join candidates for a dataset and allow the user the select datasets for joining. Joining of first and second datasets can supplement entries in both of the datasets and create a third dataset.

Abstract: Techniques are disclosed for generating metrics for a stream of interaction data. In some embodiments, a computing system receives a stream of interaction data that is based on user interactions with one or more computing systems, where the stream of interaction data includes information for multiple interaction characteristics including an interaction category. In response to receiving additional interaction information in the stream of interaction data, the computing system may generate cumulative metric values for one or more interaction categories.

Abstract: Disclosed are some implementations of systems, apparatus, methods and computer program products for facilitating the management of assessment environments in an eLearning environment. A user may switch between assessment environments by selecting from a menu of selectable assessment environments. Educational content may be presented within a context of a selected assessment environment and assessment tasks may be completed within the context of the selected assessment environment.

Abstract: Disclosed are methods, apparatus, systems, and computer readable storage media for interacting with components across different domains in a single user interface in an online social network. The user interface includes a first component and a second component, where the first component exposes content from a first database system at a first network domain and the second component exposes content from a second database system at a second network domain. A first interaction with the first component is received at a computing device, followed by a reference being provided in the second component, where the reference includes information related to the first interaction. A second interaction with the second component regarding the reference can be received at the computing device. Interactions between the components hosted on different database systems can occur through an application programming interface (API).

Abstract: Disclosed are some implementations of systems, apparatus, methods and computer program products for performing an asynchronous subscription process that enables a secondary organization to subscribe to receive data from a primary organization. A primary organization provides publish data indicating fields to which a secondary organization can subscribe. The secondary organization provides subscription data that indicates published fields to which the secondary organization has subscribed. In some implementations, a state of a connection between the primary organization and the secondary organization is maintained and updated to ensure that the publish data and subscription data cannot be modified until the subscription process is completed.

Abstract: Techniques are disclosed relating to predicting events based on automation parameters and initiating a procedure to request user input. In some embodiments, the system automatically selects one or more component types to display an interface to request the user input, e.g., based on user interface elements associated with the procedure. These component-based techniques may be used to imitate another interface while automatically formatting the input data without a known template.

Abstract: A graph representation of a designated application may be created. The graph representation may include nodes that each represent a computer programming code statement associated with the designated application as well as edges that each represent a logical linkage between two or more computer programming code statements. A determination may be made as to whether the designated application constitutes an unacceptable security risk by comparing the designated graph representation with a plurality of comparison graph representations. When it is determined that the designated application constitutes an unacceptable security risk, a message may be transmitted to prevent the designated application from being executed.

Abstract: Techniques are disclosed for automatically generating stencils for content of a user interface (UI) to be rendered. A computer system receives information specifying content of a user interface (UI) to be rendered. Based on this information, the computer system identifies one or more bounding regions of content within the UI, including analyzing metadata and a rendered version of the UI. The computer system then automatically generates, one or more UI stencils based on the identified bounding regions, that are displayable as progress indicators prior to rendering corresponding UI content. Once it has generated the stencils, the computer system stores information specifying the one or more UI stencils for use in the UI. Automatically generating stencils for UIs may advantageously reduce the time gap from development to deployment of these UIs while improving their perceived performance and, by extension, improving user experience.

Abstract: A method for obtaining query response data by a relational database management system (RDBMS) is provided. The method receives a user input query, by a processor associated with the RDBMS, wherein the user input query comprises a query request for a set of data; formats the user input query into a second query language suitable for communication between the RDBMS and a query response interface associated with a second data storage external to the RDBMS, by the processor, to generate a reformatted user input query, wherein the RDBMS is configured to perform query operations using an n-ary tree format, and wherein the query response interface is configured to perform query operations using a binary tree format consisting of two child nodes per non-terminal node of a binary tree; and transmits the reformatted user input query to the query response interface, via a communication device communicatively coupled to the processor.

Abstract: Systems and methods for performing authentication may include encrypting, by a server computing system, a question based on a first password associated with a user and based on successful verification of user identification to generate an encrypted question; transmitting, by the server computing system, the encrypted question to a user computing system; receiving, by the server computing system, an encrypted response from the user computing system, the encrypted response associated with the encrypted question; decrypting, by the server computing system, the encrypted response based on the first password to generate a response; and establishing, by the server computing system, a login session with the user computing system based on successful verification of the response.

Abstract: In a multitenant database, one or more supporting data tables are used to write and store tenant data. Based on the contextual data returning an indication of validity of a detected database transaction, various actions are performed. Data changes may be captured if no valid context is found. At runtime, triggers are used to set a valid context or fix mode context, and database operations causing the data corruptions are captured in a change tracking data structure. The captured data from the database operations include a primary key and an original value for each data change. The original value and primary key for each data change is used to nullify the unintended write.

Abstract: A system receives an object selection, and outputs the object. The system receives a first service selection, outputs the first service's object, receives a second service selection, and outputs the second service's object. The system receives selections of the object's first field and the first service object's field, and stores first metadata that maps between the object's first field and the first service object's field. The system receives selections of the object's second field and the second service object's field, and stores second metadata that maps between the object's second field and the second service object's field. The system updates an object instance by using the first metadata to send first request data to the first service and receive first response data from the first service, and by using the second metadata to send second request data to the second service and receive second response data from the second service.

Abstract: Disclosed herein are system, method, and computer program product embodiments for a query processing system. An embodiment operates by receiving a query associated with a table. An ordered index with entries that include key values that uniquely identifies a corresponding record in the table is determined. A last key value is initialized to store a minimum value for a data type of the key value. The query is executed as a union-all of a plurality of queries. While a count of selected records is less than or equal to a threshold quantity and at least one entry remains in the ordered index, an ordered next entry with a key value subsequent to the last key value in the index is identified, the corresponding record is selected from the table, the last key value is updated, the query is executed, and the count is incremented.

Abstract: Implementations are described which provide for recipient-based filtering of an event that relates to a topic to which consumers are subscribed. Responsive to determining that an attribute of the event includes a set of one or more identifiers for intended recipients for the event, the event is delivered to consumers that correspond to the intended recipients. Alternatively, responsive to determining that the attribute of the event does not include a set of one or more identifiers for intended recipients for the event, the event is delivered to all of the consumers subscribed to the topic to which the event relates.

Abstract: A computer implemented method manages access to resources of a cloud platform. The method includes retrieving, at a computing device of the cloud platform, context data and load policies for a requestor and an identified resource, combining, by the computing device, loaded policies with context data into a combined data structure, evaluating, by the computing device, a resource request and apply policies for requestor based on role of requestor using the combined data structure, generating, by the computing device, resource permissions for the requestor, and returning, by the computing device, resource permissions to the requestor.

Abstract: Embodiments regard maintaining data consistency between transactional and non-transactional data stores. Embodiments may include receiving a request to archive a set of data stored in a first data store, recording a high water mark in the first data store for the set of data, and archiving the set of data. Archiving the set of data may include copying the set of data into a second data store and inserting a high water mark for the set of data in the first data store and the second data store. Embodiments may further include updating a reference high water mark upon successful completion of operations for the archiving of the data, the reference high water mark representing completion of a last successful archive operation, and, upon receiving a query for requested data contained in the first or second data store, determining whether to allow viewing of the requested data based at least in part on a current value of the reference high water mark.

Abstract: A computer implemented method of providing suggestions of related columns for a table operation in a data management system is provided. In one embodiment, the method includes storing, by a processor, a table having a plurality of rows and a plurality of columns, metadata associated with the plurality of columns, and data stored within the plurality of rows and the plurality of columns; receiving, by a processor, a table operation selected by a system or user; processing, by a processor, at least one of the data stored in the plurality of columns and the metadata associated with plurality columns based on a type of the selected table operation to determine at least one relationship between at least two columns of the plurality of columns; and generating, by the processor, dialog data that presents the at least one relationship between the at least two columns to a system or user for use in the table operation.

Abstract: Techniques are disclosed relating to processing data stored within database tables in a parallelized manner. In various embodiments, a computer system maintains a database having a database table storing data for a plurality of tenants and an index structure storing indexes for accessing data stored in the database table. In some embodiments, the computer system receives, from a particular tenant, a request to perform a task that includes operating on particular data. In some embodiments, the computer system determines a portion of the index structure corresponding to the particular tenant and divides a range of indexes within that portion into a plurality of index sub-ranges. In various embodiments, the computer system processes portions of the task in parallel by determining an index sub-range for each of a plurality of threads and causing each of the threads to operate on a portion of the particular data specified by its index sub-range.

Abstract: Computing systems, database systems, and related conversational updating methods are provided for dynamically updating graphical user interfaces responsive to conversational user inputs received via a chatbot or other conversational interactions with a user.

Abstract: Systems and techniques are disclosed relating to management of a database. A method may include maintaining, by a computer system, a multi-tenant database operable to store a plurality of objects. Each object may be capable of including up to a maximum potential number of definable fields. Each field may have an associated index number that has been assigned sequentially. The method may include receiving user-defined data values for a subset of the maximum potential number of fields of a particular object, and storing, for the particular object, a boundary value indicating a range of index values that have been defined for the particular object. The method may further include, in response to determining that the particular object has been accessed, selectively processing a number of fields of the particular object. The number of fields may be determined based on the stored boundary value for the particular object.

Abstract: A client device receives search queries and displays via a user interface, search results representing a set of the records based on the search queries. The client device monitors implicit user interactions with search query terms and records displayed in response to various search queries, for example, implicit user interactions representing movements of cursor on the portion of user interface displaying a particular record. The client device receives a partial search query. Partial search results representing a set of the records based on the partial search query are determined for display via the user interface. The relevance score for each record is determined based on implicit user interactions associated with past search queries. The partial search results are ranked based on the relevance scores and displayed by the client device according to the ranked order.

Abstract: Client fingerprints can be used to detect and defend against malware and hacking into information systems more effectively than using IP addresses. A unique client fingerprint can be based on data found in the client's SSL client hello packet. SSL version, cipher suites, and other fields of the packet can be utilized, preferably utilizing individual field values in the order in which they appear in the packet. The ordered values are converted to decimal values, separated by delimiters, and concatenated to form an identifier string. The identifier string may be mapped, preferably by a hash function, to form the client fingerprint. The client fingerprint may be logged, and whitelists and blacklists may be formed using client fingerprints so formed.

Abstract: Techniques are disclosed relating to caching techniques for processing a database change stream. A caching module of a computer system may receive change records from a change stream that includes a plurality of records indicating changes to a database table. The change stream may include change records for multiple shards and is accessible by providing one or more position indicators for one or more of the multiple shards to request one or more change records and an updated position indicator. The caching module may store, for changes to a set of one or more shards for which the caching module is configured, one or more cache entries that each include a group of change records up to a threshold group size. A change processor module of the computer system may request a portion of the change stream by providing a received position indicator. The change processor module may receive, from the caching module, one or more cached change records from a cache entry that matches the provided position indicator.

Abstract: Disclosed herein are system, method, and computer-readable storage-medium embodiments for automatic discovery of translated text. An embodiment may include relating a user-interface (UI) output with a corresponding localization object in a code-base index and matching a first instance of a unique identifier with a second instance of the unique identifier. The first instance of the unique identifier may be located in a code base corresponding to the code-base index, and the second instance of the unique identifier may correspond to the UI output. The code base may be structured to comprise the unique identifier in a given context. Further operations may include retrieving a reference to the corresponding localization object of the UI output in response to a determination that the UI output is incorrect in the given context, and outputting the reference to the corresponding localization object. The reference may be copied into a ticket of a tracking system.

Abstract: A request to identify a data value may be received via a network at a designated one of a plurality of identity nodes. A query that includes the data value may be transmitted to an identity service associated with the designated identity node. A response message from the identity service may include one or more designated network identifiers corresponding with the data value. The designated identity node may communicate with the plurality of identity nodes to identify a plurality of network identifiers corresponding with the data value. A trust ledger may be updated to include a correspondence between a selected one of the network identifiers and the data value.

Abstract: An interactive database object representation may be created based on configuration instructions. The interactive database object representation may include a plurality of graphical elements that are each associated with a respective database object field. Each of the database object fields may be associated with a database object definition within a database. The interactive database object representation may be published to a storage medium for transmission upon request to a client machine via a network. The interactive database object representation may facilitate the display and editing of data associated with an instance of the database object.

Abstract: Systems, methods, and apparatuses for implementing authentication of a user login to an external website from a community in a cloud based computing environment. An exemplary system having at least a processor and a memory therein includes means for identifying a first domain where a user is to be allowed to login to an external web page hosted thereon, and means for connecting the external web page with a community of a cloud computing environment hosted on a second domain different than the identified first domain, the connecting means handling how the connected community authenticates the user when the user logs into the external web page and providing one of a plurality of login experiences for the user based on conditions determined at run time.

Abstract: Methods, systems, and devices supporting a data model abstraction framework are described. Some platforms (e.g., a multi-tenant cloud computing platform) may manage data across a number of persistent systems (e.g., cloud platforms, data stores, packages, etc.). To efficiently manage data across such systems, a platform may implement a metadata-driven abstraction layer. The abstraction layer may support a number of interface objects and interface fields, which may operate as abstracted versions of persistent objects and persistent fields. External entities (e.g., users, triggers, customizations, packages, plugins, or any other entities) may interact with the interface objects, and the abstraction layer may automatically handle mappings from the interface objects to the persistent systems. By using the metadata-driven abstraction layer, the platform may resolve conflicts between the external entities and multiple underlying persistent systems.

Abstract: The technology disclosed relates to creating and frequently updating multiple online analytic processing (OLAP) analytic databases from an online transaction processing (OLTP) transaction updatable system that includes transaction commit, rollback, and field level security capabilities. It also relates to transparently decoupling extraction from rebuilding of frequently updated OLAP analytic databases from the OLTP transaction updatable system.

Abstract: Methods and systems are provided for automatically enriching collected seeds. Each website that is associated with each collected seed is processed via a web crawler that crawls a home webpage for the company associated with that collected seed to verify, based on similarity between company name and website name, that a website associated with that home page belongs to that company. When verification is successful, other webpages on the website are processed to fetch information using different extractor algorithms each being designed to fetch a specific attribute for that company. Search engine(s) and third-party APIs can also be used to collect additional company information that can be added to each collected seed. Each collected seed is then enriched by adding all of the additional company information to the original seed data.

Abstract: Systems and methods for providing concurrent access to a resource via multiple user identities via a single client entity. A first authenticated session is established with an instance of a browser. The first session is associated with a first identity of a first user. A request to access the resource with an intermediate identity concurrently with the first session is detected. The intermediate identity is mapped to a target identity of a target user to be emulated. A second authentication session is established with the browser instance. The second session is associated with the intermediate identity. The request to access the resource is translated into a request to access the resource with the target identity. The translated request is forwarded to the resource. The response from the resource is translated to a response to the browser instance accessing the resource utilizing the target identity and returned to the browser instance.

Abstract: In a cloud computing environment, a storage space management system provides for uniform collection of usage statistics for storage disks and storage consumers, including usage statistics for a consumers' storage buckets, where a storage bucket represents a logical container of files, objects or other types of stored data for a given consumer. The system enables automated evaluation of space usage policy against the collected statistics. The system enforces the evaluated policy determinations, including queueing jobs that manage storage disk eligibility for storing data and jobs that direct traffic from storage consumers to storage disks that have sufficient storage available.

Abstract: Mapping of database partitions to available nodes. Metric information related to the partitions of the database are stored. One or more metrics associated with the partitions are gathered. A plurality of potential mappings of partitions to nodes are evaluated. One of the potential mappings of partitions to nodes to result in improved metric distribution among the nodes and the partition moves are within a pre-selected move constraint is selected. The selected potential mapping is implemented by moving one or more partitions between one or more nodes.

Abstract: A method by a computing system implementing a node within a cluster of nodes to load balance among the cluster of nodes using retroactive refusal. Each of the nodes within the cluster of nodes is capable of processing work items. The method includes accepting a work item to be processed by the node, monitoring a resource utilization of the node, determining whether the resource utilization of the node exceeds a predetermined threshold, and retroactively refusing the work item in response to a determination that the resource utilization of the node exceeds the predetermined threshold, wherein the retroactive refusal causes the work item to be reassigned from the node to another node within the cluster of nodes.

Abstract: A method for managing a user's email subscriptions has been developed. The method provides a user interface (UI) to the user that allows the user to view and select multiple stand-alone components across multiple dashboard displays for an email subscription to an email address. The user's selections are received via the UI and include one or more stand-alone components from a first dashboard display and one or more stand-alone components from a second dashboard display in the email subscription. The first dashboard display is not the same was the second dashboard display. A display of each of the subscribed stand-alone components is rendered periodically based on the user's preference. The rendered displays are combined into a single email message that is sent to the email address upon completion of the rendering of the displays.

Abstract: A software package having one or more custom metadata types is installed. The software package has computer-executable code that causes one or more processors to perform at least accessing the one or more custom metadata types. One or more protected records are accessed within the one or more custom metadata types. For the protected records, code in the installed package can read the protected records and can return the records whether protected or not. If the custom metadata types are in a separate base package, code in the base package can also read the records. Returned information is stored in the one or more custom metadata records that has been accessed.

Abstract: Techniques are disclosed relating to custom user interface design based on user interaction metrics from another communication channel. In disclosed embodiments, a computing system generates one or more interaction metrics, based on a first set of user input characteristics for user interaction with multiple different user interface formats via a first communication channel. In some embodiments, the first communication channel supports tracking of the first set of user input characteristics and a second communication channel supports tracking of a second, different set of user input characteristics. In some embodiments, the computing system determines, based on the one or more interaction metrics from the first communication channel, a set of design parameters for formatting a user interface to be displayed via the second communication channel.

Abstract: There are provided mechanisms and methods for maintaining data stored in a data structure. These mechanisms and methods for maintaining data stored in a data structure can provide maintenance operations with improved efficiency, functionality, etc.

Abstract: A method for securely sharing a common software package includes storing, within a database, a set of software packages associated with a first namespace, then storing, within the database, a common software package associated with the set of software packages. The common software package is obfuscated and includes an access modifier. A request to install a first software package selected from the set of software packages associated with the namespace is received by a subscriber. In response to the request from the subscriber, the system installs the first software package and the common software package in accordance with the access modifier.

Abstract: A binary outcome of an activity is predicted based on samples of the activity. The activity is characterized by features that can take on any of a set of mutually exclusive levels. An initial candidate pool of terms is selected. The terms are feature levels or combinations of feature levels. The candidate terms are used to create two ordered pools of terms, one including terms that are positively predictive and another including terms that are negatively predictive. The terms in each pool are ordered by strength of predictiveness and diversity of predictiveness relative to terms higher in the order. A final set of terms is selected by combining terms from these two pools.

Abstract: Disclosed are some implementations of systems, apparatus, methods and computer program products for facilitating the validation of assessments in an eLearning environment. Validation is facilitated using an assessment definition that includes one or more application programming interfaces (APIs) and identifies, for each of the APIs, a corresponding plugin and handler. Each of the APIs is configurable to obtain at least one user response to a corresponding challenge task via the corresponding plugin and each handler is configurable to validate the user response returned via the corresponding API. The accuracy of the user response to each challenge task is determined via the corresponding handler identified within the assessment definition. APIs can include a third party API, enabling validation of user responses across different systems. The user's knowledge may be assessed based upon the accuracy of the user's responses to all of the challenge tasks.

Abstract: Some embodiments of the present invention include a method for importing one or more datasets using a computing system with a small display screen. The data in the one or more datasets may then be used for data analysis using the small display screen. The method includes determining one or more field identifiers and associated field type information for one or more fields of the dataset to be imported into a mobile computing system. The one or more field identifiers and associated field type information are displayed on a display screen of the mobile computing system using a graphical user interface. The dataset is then imported using the determined field identifiers and associated field type information based on receiving a confirmation to import.

Abstract: In various embodiments, a method of transferring referential data objects may be performed. The method may include receiving, by a system, a request to move a specified plurality of data objects from a source environment to a target environment within a multi-tenant database system. The system may identify, based on data relationships of the data objects, an unspecified plurality of data objects associated with the specified plurality of data objects. The unspecified plurality of data objects may have a referential relationship to the specified plurality of data objects. The system may initiate a transfer of the specified and unspecified data objects. The system may also identify a data field of a data object that has a source environment-specific data value and modify the data field to a target environment-specific data value.

Abstract: A user engagement platform may be maintained in association with an application or service. The user engagement platform may be configurable to provide user engagement content to users of the application or service. A request to perform an operation on first user engagement content may be received from an authorized administrator. The first user engagement content may be configurable by the authorized administrator to be automatically provided to users of the application or service in response to occurrence of a first event. The operation may be performed on the first user engagement content. It may be determined that the first event has occurred in association with a first user of the application or service. The first user engagement content may be caused to be displayed on a device of the first user.

Abstract: Database environments may choose to schedule complex analytics processing to be performed by specialized processing environments by caching source datasets or other data needed for the analytics and then outputting results back to customer datasets. It is complex to schedule user database operations, such as running dataflows, recipes, scripts, rules, or the like that may rely on output from the analytics, if the user database operations are on one schedule, while the analytics is on another schedule. User/source datasets may become out of sync and one or both environments may operate on stale data. One way to resolve this problem is to define triggers that, for example, monitor for changes to datasets (or other items of interest) by analytics or other activity and automatically run dataflows, recipes, or the like that are related to the changed datasets (or other items of interest).