Abstract: System and methods are described for performing sequences of computations in an infrastructure-agnostic manner. In one implementation, a method comprises: receiving a dispatch request for executing a user-defined pipeline; computing a performance metric based on the dispatch request; and determining, based at least partially on the performance metric, whether to execute the user-defined pipeline locally by the pipeline engine or transmit the dispatch request back to the network adapter.

Abstract: Creating an object is disclosed. An instance of a sharable type is created. An instance of a lightweight type is created. The sharable type is designated as a parent of the lightweight type. The instance of the sharable type is designated as a parent of the instance of the lightweight type. The instance of the sharable type may be shared by one or more other instances of the lightweight type.

Abstract: A method and system for handling asynchronous data streams in a multi-tenant system. The process includes receiving at least a first stream of data and a second stream of data by a rules engine, determining by pattern matching of the rules engine, whether data in the first stream or data in the second stream meet conditions of a rule defined by a tenant of the multi-tenant system, and implementing by the rules engine the rule including a set of actions to modify data from the second data stream, in response to the data in the first stream matching the conditions the rule.

Abstract: Creating an object is disclosed. An instance of a sharable type is created. An instance of a lightweight type is created. The sharable type is designated as a parent of the lightweight type. The instance of the sharable type is designated as a parent of the instance of the lightweight type. The instance of the sharable type is shareable by one or more other instances of the lightweight type.

Abstract: A method for providing local access to managed content is disclosed. The method comprises receiving from a remote host a request to perform an operation with respect to content associated with a set of managed content and obtaining information required to respond to the request. The method further comprises providing in response to the request a content locator usable to perform the requested operation through direct communication with a content system through which the content is accessible.

Abstract: A record management system stores records for an organization having a plurality of members and a plurality of groups, and manages accessibility of the records for the organization according to a specified record access policy. The record management system generates an accessibility database that indicates, for each member, records that are explicitly or implicitly accessible by each member such that the records accessible for each member can be quickly determined if needed. A member has explicit access to a record if there is an explicit indication of accessibility between the member and the record. A member has implicit access to a record through membership associations to other members or groups that have access to the record. The record management system also receives search queries from members and returns records that are relevant and accessible to the members based on the accessibility database.

Abstract: System and methods are described for performing sequences of computations in an infrastructure-agnostic manner. In one implementation, a method comprises: receiving a dispatch request for executing a user-defined pipeline; computing a performance metric based on the dispatch request; and determining, based at least partially on the performance metric, whether to execute the user-defined pipeline locally by the pipeline engine or transmit the dispatch request back to the network adapter.

Abstract: A method for providing local access to managed content is disclosed. The method comprises receiving from a remote host a request to perform an operation with respect to content associated with a set of managed content and obtaining information required to respond to the request. The method further comprises providing in response to the request a content locator usable to perform the requested operation through direct communication with a content system through which the content is accessible.

Abstract: In one embodiment, a microkernel of an operating system executing on a computing system receives, from an application, a first system call requesting to communicate with a service registry. The first system call being associated with an operation request. The microkernel sends a first instruction to the service registry. The microkernel receives, from the service registry, a second system call requesting to communicate with at least one of an application service or a protocol service. The second system call being associated with the operation request. The microkernel sends a second instruction to at least one of the application service or the protocol service. The microkernel receives, from at least one of the application service or the protocol service, a third system call requesting to communicate with a driver service. The third system call being associated with the operation request. The microkernel sends a third instruction to the driver service.

Abstract: A method for providing local access to managed content is disclosed. The method comprises receiving from a remote host a request to perform an operation with respect to content associated with a set of managed content and obtaining information required to respond to the request. The method further comprises providing in response to the request a content locator usable to perform the requested operation through direct communication with a content system through which the content is accessible.

Abstract: In one embodiment, a method includes generating a handle that references a checkpoint for a service, sending the handle to the service, wherein the handle is configured to be used by the service to store one or more states of the service in the checkpoint, determining that the service needs to be restarted, restarting the service, accessing the handle for the checkpoint, and sending the handle for the checkpoint to the restarted service, wherein the handle for the checkpoint is configured to be used by the restarted service to restore the one or more states.

Abstract: In one embodiment, a method includes generating one or more queues by an application executing on a client system, wherein each queue is associated with one or more declarative attributes, wherein each declarative attribute declares a processing requirement or a processing preference, generating one or more work items to be processed, for each of the one or more work items enqueuing the work item into a selected one of the one or more queues based on the one or more declarative attributes associated with the selected queue, and providing the one or more queues to a scheduler of an operating system of the client system, wherein the scheduler is configured to schedule each of the one or more work items for processing based on one or more policies and the one or more declarative attributes of the selected queue for that work item.

Abstract: In one embodiment, a method includes allocating, by an operating system of a computing device, computer-implemented memory into a discardable portion and a durable portion; receiving, from a computer-executable program, a designation indicator of a particular data file that is associated with the computer-executable program indicating that the particular file is to be stored in the discardable portion of the memory and in response, storing the particular data file in one or more particular pages of the discardable portion of the memory; identifying an occurrence of a computing condition and in response, marking the one or more particular pages that include the particular data file as invalid for the computer-executable program; receiving, from the computer-executable program, a request for the particular data file; and in response to receiving the request, providing, to the computer-executable program, a notification that the particular data file is invalid for the computer-executable program.

Abstract: A record management system stores records for an organization having a plurality of members and a plurality of groups, and manages accessibility of the records for the organization according to a specified record access policy. The record management system generates an accessibility database that indicates, for each member, records that are explicitly or implicitly accessible by each member such that the records accessible for each member can be quickly determined if needed. A member has explicit access to a record if there is an explicit indication of accessibility between the member and the record. A member has implicit access to a record through membership associations to other members or groups that have access to the record. The record management system also receives search queries from members and returns records that are relevant and accessible to the members based on the accessibility database.

Abstract: A method and system for handling asynchronous data streams in a multi-tenant system. The process includes receiving at least a first stream of data and a second stream of data by a rules engine, determining by pattern matching of the rules engine, whether data in the first stream or data in the second stream meet conditions of a rule defined by a tenant of the multi-tenant system, and implementing by the rules engine the rule including a set of actions to modify data from the second data stream, in response to the data in the first stream matching the conditions the rule.

Abstract: A record management system stores records for an organization having a plurality of members and a plurality of groups, and manages accessibility of the records for the organization according to a specified record access policy. The record management system generates an accessibility database that indicates, for each member, records that are explicitly or implicitly accessible by each member such that the records accessible for each member can be quickly determined if needed. A member has explicit access to a record if there is an explicit indication of accessibility between the member and the record. A member has implicit access to a record through membership associations to other members or groups that have access to the record. The record management system also receives search queries from members and returns records that are relevant and accessible to the members based on the accessibility database.

Abstract: A method for providing local access to managed content is disclosed. The method comprises receiving from a remote host a request to perform an operation with respect to content associated with a set of managed content and obtaining information required to respond to the request. The method further comprises providing in response to the request a content locator usable to perform the requested operation through direct communication with a content system through which the content is accessible.

Abstract: In one embodiment, an access control method includes receiving an access request that identifies a resource and an application requesting the resource. The method includes identifying permission settings associated with the application, where the permission settings include a contextual criterion. The method includes accessing context information associated with the contextual criterion. The method includes determining the context information satisfies the contextual criterion of the permission settings. The method includes allowing the application to access the resource in response to determining the context information satisfies the contextual criterion of the permission settings.

Abstract: In one embodiment, an access control method includes receiving, from an application, a permission rule defining a criterion for permitting the application to access a resource, where the criterion identifies a logic predefined by the operating system and a condition for satisfying the logic. The method includes storing the permission rule and associating the stored permission rule with the application. The method includes receiving, from the application, a request to access the resource. The method includes accessing the stored permission rule associated with the application. The method includes determining that the application is permitted to access the resource by processing the logic and the condition. The method includes allowing the application to access the resource.

Abstract: In one embodiment, a method includes allocating a shared memory region accessible by a tracing service and services running in user mode outside of a microkernel of an operating system, in which the shared memory region is used by each service to store entries of execution data from operations executed by the service and each entry of execution data has a task identifier, receiving a query for execution data with a desired task identifier by the tracing service, retrieving a set of entries of execution data from the shared memory region by the tracing service based on the desired task identifier, in which the task identifier of each entry of execution data in the set matches the desired task identifier, and returning the set of entries of execution data by the tracing service.