Salesforce Com, Inc.

International Business Machines Corporation

Oracle International Corporation

Yahoo! Inc.

Salesforce, Inc.

Siebel Systems, Inc.

Saleforce.com, Inc.

Donovan Schneider

Daniel C Silver

Vijayasarathy Chakravarthy

Fred Im

Alex Gitelman

David Park

Guillaume Le Stum

Wei Li

Saptarshi Roy

Ravishankar Arivazhagan

Leo Tenenblat

Ryan Lamore

Marko Koosel

Medha Pradhan

Nicholas Geh

Srirama Koneru

Naveen Purushothama Rao

Nicholas Albert Bugajski

Neelav Rana

Edward Shaw-Lee Suen

Alex Field

Puneet Gupta

Kazi Atif-Uz Zaman

Pradeep Mantha

William M Wagstaff

James G Taylor

Craig David Weissman

Simon Zak Fell

Richard Lee Cole

Kevin Oliver

Sunil Nagaraj

Michael Tang

Bill C Eidson

Galt Johnson

Phillip M Fernandez

Keith Kelly

David L Morandi

Craig J Bunger

Jan Michael Timmerman

Jesus De Oliveira

Ambikeshwar Raj Merchia

Venkatesan Ramachandran

Ann M Koehler

Arunachalam Balachandran

Jeffrey A Byard

Keith Jones Kelly

Methods, systems, and devices for providing matching security between data stores are described. In a database system, an operational data store may store transactional datasets and an analytical data store may store analytics datasets generated based on the transactional datasets. For these analytics datasets to efficiently inherit the security configurations of the transactional datasets, security information may be embedded in datasets retrieved from the operational data store during a data acquisition procedure. This security information may be converted into an embedded multiple-value field for storage in the analytical data store. The analytical data store may receive a query for data in a dataset, and may determine security descriptors associated with the user sending the query. The analytical data store may then filter the data based on comparing these determined security descriptors with the security information in the multiple-value field, and may transmit a query response with the filtered data.

Providing matching security between data stores in a database system

The technology disclosed relates to creating and frequently updating multiple online analytic processing (OLAP) analytic databases from an online transaction processing (OLTP) transaction updatable system that includes transaction commit, rollback, and field level security capabilities. It also relates to transparently decoupling extraction from rebuilding of frequently updated OLAP analytic databases from the OLTP transaction updatable system.

Streamlined creation and updating of olap analytic databases

A method for data processing is described. The method may include configuring a connection template that defines a data extraction flow for a first data source and transmitting from an analytics application server a controller application programming interface (API) call based on a query request for data stored at the first data source. The method may further include instantiating a connector microservice based on the controller API call and the connection template, where the connector microservice is configured with a first data connector with the analytics application server and a second data connector with the first data source that is specific to the first data source. The method may further include retrieving at the analytics application server the data from the first data source based on the connector microservice.

Data interface for secure analytic data system integration

Methods are disclosed for dynamic node allocation for a server system that can automatically heal on failure&#x2014;minimizing the need for static configuration&#x2014;dynamically adjusting server resources to match load, and minimize end user wait times. The disclosed methods dynamically allocate nodes to increase capacity for a platform that accepts data queries. Additionally disclosed is a system for rolling version update deployment: workers maintain org lists of org-task-queues that they service; org-affinities between the workers and the org-task-queues require the workers to have access to local copies of immutable data sets to service org-tasks from the org-task-queues of the orgs that they service. A leader running on a worker implements a healing and balancing service that maintains worker redundancy, manages the workers' org-affinities to accumulate orgs on their respective org-lists. The leader implements messaging to the workers to update to a new software version and monitors completion of updates.

Rolling version update deployment utilizing dynamic node allocation

The technology disclosed relates to assigning field level security to fields extracted from primary sources on a batch basis and compiled into analytical, read-only databases, for ultra-fast, ad-hoc data exploration and faceted navigation on integrated, heterogeneous data sets. The method includes assigning field level security to the extracted fields by combining user selectable inheritance of field level security from source fields that yield the extracted fields, with pinning of inheritance of field level security for the extracted fields to reference fields in the database sources wherein the reference fields are distinct from the extracted fields. The disclosed method also includes receiving additional fields as unsecured data sets, and assigning field level security to the additional fields, received by combining user selectable explicit specification of field level security for the received fields with pinning of inheritance of field level security for the received fields to reference fields in the database sources.

Fine grain security for analytic data sets

A predicate-based row level security system is used when workers build or split an analytical data store. According to one implementation, predicate-based means that security requirements of source transactional systems can be used as predicates to a rule base that generates one or more security tokens, which are associated with each row as attributes of a dimension. Similarly, when an analytic data store is to be split, build job, user and session attributes can be used to generate complementary security tokens that are compared to security tokens of selected rows. Efficient indexing of a security tokens dimension makes it efficient to qualify row retrieval based on security criteria.

Row level security integration of analytical data store with cloud architecture

In accordance with embodiments, there are provided mechanisms and methods for displaying one or more data sets to a user. These mechanisms and methods for displaying one or more data sets to a user can enable enhanced data security, more relevant data display, reduced processing, etc.

Execution of bulk requests against one or more databases

Dynamic allocation of stateful nodes for healing and load balancing

Streamlined creation and updating of OLAP analytic databases

Methods and systems for performing cross store joins in a multi-tenant store are described. In one embodiment, such a method includes retrieving data from a multi-tenant database system having a relational data store and a non-relational data store, receiving a request specifying data to be retrieved from the multi-tenant database system, retrieving, based on the request, one or more locations of the data to be retrieved, generating a database query based on the request, in which the database query specifies a plurality of data elements to be retrieved, the plurality of data elements including one or more data elements residing within the non-relational data store and one or more other data elements residing within the relational data store, and executing the database query against the multi-tenant database system to retrieve the data.

Methods and systems for performing cross store joins in a multi-tenant store

The technology disclosed preserves the tenant specificity and user specificity of the tenant data by associating user IDs to complementary special IDs referred to as the integration user(s). In particular, it combines the traceability of user actions, the integration of security models and the flexibility of a service ID into one integration user(s).

Integration user for analytical access to read only data stores generated from transactional systems

Source values are mapped to new user-defined categories. The new user-defined categories are stored in a new user-defined field. In an embodiment, a user-selection of an existing field is received. Based on a data type of the existing field, a specific mapping interface is displayed. The interface guides the user through specification of the new field and categories, and identification of the source values to map to the new categories.

Systems and methods for mapping a value to a new domain

System, method and computer program product for displaying one or more data sets to a user

Growing community of inventors

San Francisco, CA, United States of America

Donovan Schneider