Oracle International Corporation

Tim Wing Yu

Kongyi Zhou

K Karun

Jinyu Wang

Nipun Agarwal

Sam Idicula

Sabina Petride

Bhushan Khaladkar

Anguel Novoselsky

Ashwini Surpur

Mohammed Irfan Rafiq

Benjamin Chang

Meghna Mehta

Yuhuan (Bill) Han

Megnha Mehta

One embodiment of the present invention provides a system for efficiently evaluating a security policy. During operation, the system retrieves one or more roles associated with the user. Next, the system checks if a session-level cache exists for a set of Access Control Entries (ACEs) which is associated with the one or more roles. If this session-level cache exists, the system returns the set of ACEs from the session-level cache. Otherwise, the system generates the set of ACEs associated with the one or more roles from an Access Control List (ACL). During operation, the system can also update the one or more roles associated with the user and update the set of ACEs based on the updated one or more roles and the ACL. The system subsequently updates the session level cache with the updated set of ACEs and updated one or more roles.

Technique for efficiently evaluating a security policy

Techniques for implementing a scalable DOM and a pluggable DOM are provided. A scalable DOM implementation manages a DOM tree in memory to free unreferenced nodes, avoid generating nodes unnecessarily, and avoid storing multiple versions of the same data on disk. A pluggable DOM implementation includes an abstract interface that is defined between the API layer and the data layer of a DOM implementation. An implementation of the abstract interface is defined for each data source that is plugged in to the pluggable DOM implementation and that stores XML data in a different format.

Pluggable DOM implementation using an abstract API when receiving API calls for accessing different formats of XML data

Scalable DOM implementation

Techniques for implementing a schema-aware mid-tier binary XML are provided. Token vocabularies are stored in a repository that is accessible to mid-tier applications from separate database systems. The token vocabularies are thus shared among the mid-tier applications of each database system. The repository may be part of a file system or database that is separate from any of the database systems, or the repository may be part of one of the database systems.

Schema-aware mid-tier binary XML implementation

Approaches are described herein to represent a delta using the extensible style language transformation language (XSLT) to describe the delta between versions of a data entity. XSLT is a language that defines operations for transforming a body of data ('source') that conforms to the extended mark-up language (XML) into a different body of data ('target') typically in another format, such as HTML. A set of XML instructions represents a delta by specifying operations needed to transform or change a source version of an XML entity into a target version of an XML entity.

Representing deltas between XML versions using XSLT

Growing community of inventors

Cupertino, CA, United States of America

Tim Wing Yu