Vmware, Inc.

Credit Suisse Securities (europe) Limited

Leslie Muller

Michael Morris Wasser

Alberto Arias Maestro

Sudershan Bhandari

Valentina Reutova

Mike Barron

Derek Chasse

Murat Bayan

Frederic Torres

Ken Pespisa

Dave Zolotusky

A computer method, system and apparatus control access to secured data in a plurality of databases. A repository is coupled to the databases and has a security runtime subsystem. The repository intercepts a user query of a subject database in the plurality. The security runtime subsystem determines from the intercepted query a user and corresponding user role. Based on user role, the security runtime subsystem automatically modifies the user query to filter out secure data for which the identified user is unauthorized to access but are part of the user query.

Computer relational database method and system having role based access control

In a method of controlling access to secured data, a repository operatively coupled to one or more databases storing secure data is employed to intercept a user query of one database of the one or more databases. A user who generated the user query and a user role assigned to the user is automatically determined from the intercepted query. The intercepted query is parsed. Security information of the identified objects is looked up in a metamodel stored in the one or more databases. Based on the determined user role and the identified objects to be filtered out of the user query, an expression tree to filter out secure data is automatically built and the user query is modified by appending the expression tree to the user query. The modified query is applied to the one database.

Methods and apparatus to manage virtual machines are described. An example method includes presenting a list of available basic blueprints, storing a multi-machine blueprint referencing a first basic blueprint for a first virtual machine from the list and a second basic blueprint for a second virtual machine from the list, and in response to a request to provision the multi-machine blueprint, the request including an identification of a first number of instances to be provisioned for the first virtual machine and a second number of instances to be provisioned for the second virtual machine, provisioning the first number of instances of the first virtual machine and the second number of instances of the second virtual machine.

Methods and apparatus to manage virtual machines

Managing virtual and real machines through a provisioning system. The provisioning system allows a user to create and manage machines through a 'self-service' approach. The provisioning system interacts with one or more agents that manage the lifecycle of a machine. The system may provide templates that enable a user to readily create a virtual machine. The system may also include interfaces for administrators to manage virtual and real machine resources.

Methods and systems for managing virtual and real machines

Methods and apparatus to reclaim resources in virtual computing environments are described. An example method includes determining, with a processor, if a characteristic of a virtual machine meets a threshold indicating that the virtual machine is inactive, in response to determining that the characteristic meets the threshold, determining, with the processor, if a notification period has expired, and if the notification period has expired, de-provisioning, with the processor, the virtual machine to return computing resources assigned to the virtual machine to a cloud.

Methods and apparatus to reclaim resources in virtual computing environments

A distributed event system for a relational database is disclosed. An event data model operatively describes a target database. For a subject entity in the target database, the event data model declares and defines triggering events and respective corresponding operations. An event engine monitors database queries and events involving the subject entity and determines from the event data model corresponding operations. Execution of the determined corresponding operations is distributed to network-based agents. Agents may be filtered based on skills and/or credentials injected at runtime. Code binaries of the operations are downloaded to the agents for execution.

Growing community of inventors

London, United Kingdom

Leslie Muller