Microsoft Technology Licensing, LLC

Samuel Lenz Banina

Ilya Grebnov

Kyle Anthony Werner

Charles Lamanna

Sunay Vaishnav

Kevin Kaiwon Lam

Anjli Chaudhry

Gautam Thapar

Mark David Overholt

Jose Miguel Arreola Gutierrez

William Hong Vong

Olivier Colle

Karandeep Singh Anand

William James Staples

Rajasekaran Rangarajan

Merwan Vishnu Hade

Carlos Aguilar Mares

Alexandru Dan Burst

David James Messner

David Alexander Blyth

Kerem Yuceturk

Ryan A Jansen

Mark David Sisley

Madhur Vishwanath Badal

André Miguel Coelho De Oliveira Rodrigues

Methods for externally-delegated access control and authorization of applications and resources are performed by systems and devices. A request for access by a user to a resource of a first application is received from a client device. A memory data structure that associates the resource of the first application with an application identifier and permission information is accessed to obtain the application identifier and the permission information. A query is provided to a second application, identified by the application identifier, which has a different authorization model than the first application. The query includes a user identifier and the permission information. The second application performs a permission check and authorization for the user based on the query. A query response that includes an access indication is the received from the second application. The request is granted or denied based on the access indication.

System and method for externally-delegated access control and authorization

Generating a token for tracking a state of communications with multiple external services. Data is caused to be acquired from external services as a result of interpreting a communication from a client. The causing of the data to be acquired comprises causing a request to be issued for data from a first external service and receiving a response from the first external service. The response from the first external service includes at least a token associated with the first external service. In response to receiving the response from the first external service, an aggregate token is generated that includes the token associated with the first external service and a status of the request to the first external service. The aggregate token is caused to be sent to the client and is interpretable to inform the computer system of the status of the request to the first external service.

Stateful tokens for communicating with external services

A client device includes a processor and memory. An operating system and a client application are executed by the processor and memory. The client application is configured to determine first and second coordinated universal time (UTC) time intervals for a first non-UTC time interval associated with a first event type and a second non-UTC time interval associated with the first event type; generate a single request for the remote activity feed server to aggregate corresponding events during the first UTC time interval and the second UTC time interval; and send the single request via a network interface to the remote activity feed server.

Systems and methods for event aggregation to reduce network bandwidth and improve network and activity feed server efficiency

Described herein are various technologies pertaining an extensible, cloud-based service for creating and executing applications (e.g., business or industry-specific workflows). A user knowledgeable about a particular field can utilize a client-hosted design studio or a web-based portal to create an application ('app') (e.g., data transform) relevant to the particular field. The system thus enables users to build mobile applications across platforms without having to write computer code to communicate with backend services such as data sources and/or workflow management systems.

Application service architecture

Sharing a bundle. A method includes identifying a bundle defined by a first user. The bundle includes a number of portions. One or more portions are configured to provide data from a data source. The method further includes identifying within the bundle one or more portions of the bundle that can be changed when the bundle is consumed by other users. The method further includes modifying the identified portions before the bundle is consumed by other users.

Sharing applications by modifying attributes

Autocompleting into an invite box for purposes of sharing an executable computing resource such as an application or portion thereof. However, the autocomplete is populated with potential sharees of multiple tenants or with identities that are not registered with the tenant directory of the user. Thus, potentially any potentially sharee worldwide may be populated within the list of potential sharees. As the desired potential sharee comes into view, that potential sharee may be selected, and added to a list of one or more selected sharees. At some point, a control may be selected to allow the executable computing resource to be shared with the selected sharees within the list.

Resource sharing and designation of permissions for other tenants and unregistered users of same tenant

Aspects of the present invention relate to guaranteeing delivery of replication messages in distributed storage systems. A request to perform an operation may be received. A first replication message corresponding to the request may be created, where the first replication message comprises instructions to replicate the result of the operation to one or more target storages. The replication message may be inserted in a message queue with a delayed visibility. The operation may be performed, where a result of the operation is persisted in a source storage in a data store. Upon determining that the result was successfully persisted in the source storage, a second replication message may be created, where the second replication message comprises instructions to replicate the result of the operation to the one or more target storages. The second replication message may be inserted in the message queue with an immediate visibility.

Guaranteed delivery of replication message

Embodiments are directed to replicating data in distributed storage. A replication message may be retrieved from a message queue associated with a source table. The replication message may include a row identifier. One or more target storages within a same replication group as the source table may be identified. A row from each of the one or more target storages may be obtained corresponding to the row identifier. A winning row may be determined from the obtained rows based on a latest timestamp of the row. A replication operation may be created based on the winning row. The replication operation may be performed on the obtained rows from each of the target storages.

Flow for multi-master replication in distributed storage

Growing community of inventors

Bellevue, WA, United States of America

Samuel Lenz Banina