Microsoft Technology Licensing, LLC

Jasjit Singh Grewal

Paul F Ringseth

David Robert Shutt

Momin Mahmoud Al-Ghosien

Edward A Martinez

Jeremy M Kolpak

Richard Lee Dickinson

Michael James Ott

Neeraj Ahuja

Michaeljon Miller

Jagan M Peri

Dominic Justin Pouzin

Elliot Stephenson Lewis

Navin Ishwar Thadani

Tsvi Michael Reiter

Jigar Thakkar

Andrey A Zaytsev

Youg Lu

Jagan Peri

Min Fan

In a web-based service environment, third party providers need to have varying degrees of access to user data for their complementary services. To prevent third party providers from having broader access than necessary or not adequate levels of access, transferable restricted security tickets are employed to determine an appropriate level of access for third parties. Tickets with expiration and restriction roles define a duration and level of access for a third party. The restrictions are determined through an intersection of the authorizing user's security role and restriction roles defined in the system.

Transferable restricted security tokens

Technologies are described herein for providing a hosted multi-tenant application that utilizes per-tenant unshared private databases. A shared middle-tier is utilized in conjunction with private, unshared databases for each of the tenants. The private, unshared databases are utilized to store application data for an associated tenant, along with any customizations to the application implemented by the tenant. A shared configuration database is also utilized that stores application data that is shared among the tenants. When a request is received from a tenant to access the hosted application, the shared configuration database is utilized to locate the private, unshared database associated with the tenant making the request. The contents of the private, unshared database associated with the tenant making the request are then utilized to response to the request.

Hosted multi-tenant application with per-tenant unshared private databases

A system and methods are provided that make compile-time declarative modeling available for SOAP-based data transmission(s). The declarative modeling minimizes the amount of coding required of a developer. The underlying details regarding the SOAP protocol, dispatching to the appropriate object and function, marshaling and un-marshaling of XML and generating the SOAP response are hidden from the developer when implementing SOAP-based Web services. The task of creating a SOAP-based web service is thus greatly simplified by reducing the number and complexity of considerations required of the developer when generating SOAP-based Web services. In one embodiment, attributes for Visual C++ are utilized as a framework for a declarative syntax for SOAP-based Web services, which Visual C++ attributes have access to type and marshaling information.

System and methods for providing a declarative syntax for specifying SOAP-based web services

Technologies are described herein for governing access to a computing resource. A proxy receives a request to access a computing resource. In response to the request, the proxy determines whether the request can be granted without consulting a governor for the computing resource. If the request cannot be granted without consulting the governor, the proxy transmits the request to a broker. The broker, in turn, transmits the request to a governor for the computing resource. The governor determines whether the requested access to the computing resource should be granted. The governor generates a response to the request and transmits the response to the broker. The broker, in turn, transmits the response to the proxy. The broker may also request notifications from the governor.

Governing access to a computing resource

The claims of the present application recite a method and system for accessing information in an otherwise inaccessible application database of a DBMS using view definitions that implement a security protocol.

Secured views for a CRM database

A metadata driven system for supporting business application software required in the middle tier for a line of business applications includes a process metadata module adapted to store a process in metadata format, wherein the process object contains logic related to an entity of the application software. The system allows for persistence of various entities like accounts, incidents, etc., and allows an end user of the business application software to create new types of entities. The system also allows the end user to perform critical business logic operations even on the new entities defined by the end user after the deployment of the business application without requiring recompilation of the business application software. The metadata driven approach allows to easily make changes to business applications and to automate quality assurance of objects built on top of the business applications.

Method and apparatus for metadata driven business logic processing

Growing community of inventors

Sammamish, WA, United States of America

Jasjit Singh Grewal