Abstract: As a default, a global permissions model is established. The global permissions model serves for applying a first set of resource access permissions to shared content objects. Additionally, a set of context-aware access policies that govern user interactions over the shared content object is established. When a particular user requests an interaction over a shared content object, then interaction attributes associated with the request are gathered. The context-aware access policies are applied to the request by determining a set of extensible access permissions that are derived from the interaction attributes. The context-aware access policies are enforced by overriding the first set of resource access permissions with dynamically-determined access permissions. When a particular access request is denied, a response is generated in accordance with the set of extensible access permissions and the user is notified. In some cases, the access request is permitted, but only after the user provides a justification.

Abstract: Disclosed is an improved approach to implement metadata extraction, to extract metadata that can be used for metadata queries. The query may be applied against metadata extracted from content stored in a cloud-based content management system.

Abstract: Methods, systems, and computer program products for collaboration systems. A method for identifying selected portions of a set of content objects for use in generating a large language model (LLM) prompt comprises: identifying a content management system (CMS) wherein collaboration activities occur over time and over content objects maintained in the CMS, and wherein the CMS maintains a historical record of occurrences of the collaborator activities over the content objects. Upon receiving a natural language query from a CMS collaborator, reducing a larger corpus of content objects to a smaller corpus of context passages that are used in an LLM prompt. The smaller corpus of passages is formed using a two-phase reduction scheme whereby firstly, selected constituents from the larger corpus of content objects are identified based on CMS metadata; and then, rather than considering the larger corpus, instead considering only the selected constituents when generating the LLM prompt.

Abstract: Methods, systems, and computer program products for electronic signature systems. Multiple components are operatively interconnected to carry out operations for securing e-signatures applied to content objects. A data processing system that interacts with user devices over a network that carries e-signature events raised by the user devices is configured to implement a content management system (CMS) that maintains a single CMS e-signature object within an object storage repository. The single CMS e-signature object is representative of multiple different versions or renditions of CMS objects. Upon an e-sign event, the data processing system modifies the single CMS e-signature object.

Abstract: Systems and methods for folder synchronization and offline synchronization via a mobile platform in a web-based collaboration environment are disclosed. One embodiment includes synchronizing user selected folders and/or sub-folders via the mobile platform, using portable devices including smart phones and tablets using any mobile operating system to allow offline access. Child or sub-folders of the selected folders and/or sub-folders are automatically detected and synchronized for offline access. Any change or new content detected on the client side or on the server side is also synchronized such that the selected folders and/or sub-folders on the client and server sides are up to date.

Abstract: Methods, systems, and computer program products for gathering electronic signatures to be applied to collaboration system content objects (e.g., contracts, letters, insurance claims, riders, etc.). A collaboration system monitors changes made to the collaboration system content objects during electronic signature processing. A module of the content management system is configured to associate one or more instances of e-signing metadata to one or more of the stored content objects of the content management system. The e-signing metadata indicates whether or not a particular portion of the one or more of the stored content objects has been e-signed by a designated e-signatory. A collaborator who is not one of the designated e-signatories makes a change to one or more of the stored content objects (e.g., contracts, letters, insurance claims, riders, etc.). The change is remediated on-the-fly and the e-signing process continues without having to restart the e-signing process from the beginning.

Abstract: Securely acquiring and managing electronic-based signatures by a content management system. A content management system exposes content objects to a plurality of collaborators. Executable modules of the content management system implement an Internet-based interface that is configured to acquire electronic-based signatures from a user device. A particular user device is configured to access particular content objects over the Internet-based interface and to acquire an electronic-based signature corresponding to one or more of the particular content objects. When one or more conditions are detected that would at least potentially influence how the acquisition of the electronic-based signature is carried out, then one or more remediation actions are invoked. Various security-specific remediation actions address corresponding security vulnerabilities. Various document-specific remediation actions are determined based on the document conditions that had been detected.

Abstract: Methods, systems, and computer program products for a content management system. Embodiments operate within or in conjunction with such a content management system. The content management system stores content objects for access by various collaborators, including extra-system collaborators. A user of the content management system configures extra-enterprise shared link URLs that permit the extra-system collaborators to access shared content objects over an Internet connection. A shared link event graph data structure is formed based on access requests over the extra-enterprise shared link URLs. An interactive user interface module is generated by processing a shared link report query over the shared link event graph data structure to select a subject set of the extra-enterprise shared link URLs, and to generate a data set of the interactive user interface module based at least in part on results from the query. A user interacts with the interactive user interface module to generate insights.

Abstract: A shared workflow operates over a plurality of execution environments associated with a content management system. A shared workflow is created in a first execution environment. The workflow is posted to a shared location. A particular workflow is selected from an exchange or other shared location and is thereafter configured to execute in a second execution environment. A computing module analyzes the workflow to identify environment-specific parameters. Based on a computer-generated recommendation emerging from the analysis, a user or a computing agent modifies the environment-specific parameter so as to configure the workflow prior to execution in the second execution environment. The first execution environment may correspond to a first department of an enterprise and the second execution environment may correspond to a second department of the same enterprise.

Abstract: Internet communications between a content management system that stores a plurality of content objects and a third-party system is established. A hierarchy at the third-party system is determined, and a file and folder content object hierarchy at the content management system is generated based on the determined hierarchy at the third-party system. Users of the content management system and users of the third-party system are reconciled by comparing attributes of users of the third-party system with attributes of users of the content management system. Permissions pertaining to user accessed to content objects at the content management system are reconciled with permissions of the third-party system. Reconciled access permissions are applied to content objects of the generated hierarchy at the content management system. Some of the access permissions that are applied to the content object hierarchy of the content management system are more restrictive than the permissions of the third-party system.

Abstract: Embodiments are directed to synchronizing files between client devices utilizing different file systems with different filename restrictions. Generally speaking, a server of a cloud-based storage environment can, upon generation of a file or receiving a file from a first client device, detect any “illegal” characters therein, i.e., characters that are predefined by a file system of a second client device of the environment as being impermissible for use in a filename, and substitute a replacement character for those illegal characters. This replacement character can comprise a character that is permissible by the file system of both the first and second client devices, thereby allowing synchronization and access. Additionally, the server(s) can identify the original filename from the first client device and substitute the replacement characters back to the original filename when the file is being accessed by or synchronized with the first client device.

Abstract: Embodiments of the disclosure provide systems and methods for obtaining content for a workspace of a collaboration environment. According to one embodiment, requesting and obtaining one or more content items for a workspace of a collaboration environment can comprise generating a content request identifying the one or more content items and metadata for the one or more content items requested from a submitter. The content request can be provided to a computing device associated with the submitter. A determination can be made as to whether the content item can be submitted anonymously. In response to determining the content items may be submitted anonymously, the content items and the metadata can be obtained while maintaining the anonymity of the submitter.

Abstract: Methods, systems, and computer program products for managing interactions between a content management system (CMS) and a large language model (LLM) system. The semantics of user questions can be considered before prompting an LLM, or alternatively, before querying datasets that are local to the CMS. Given a user question to be answered, the embedding of the user question can be matched against preconfigured sample question embeddings to determine a best match. A prompt corresponding to the determined best match is then configured based on identification of the class or classes that correspond to the matched question. Prompts for provision to LLMs can be synthesized based on a particular user's identity and/or based on the particular user's historical collaboration activities over objects of the CMS. The LLM can be hosted by a third-party provider. Alternatively all or portions of a large language model system can be hosted within the CMS.

Abstract: Methods, systems, and computer program products for managing interactions between a content management system (CMS) and a large language model (LLM) system. The semantics of user questions can be considered before prompting an LLM, or alternatively, before querying datasets that are local to the CMS. Given a user question to be answered, the embedding of the user question can be matched against preconfigured sample question embeddings to determine a best match. A prompt corresponding to the determined best match is then configured based on identification of the class or classes that correspond to the matched question. Prompts for provision to LLMs can be synthesized based on a particular user's identity and/or based on the particular user's historical collaboration activities over objects of the CMS. The LLM can be hosted by a third-party provider. Alternatively all or portions of a large language model system can be hosted within the CMS.

Abstract: A method for processing content management system workflows. Systems and subsystems are established for configuring a content management system to implement workflow processes wherein the content management system (CMS) exposes instances of stored content objects to a plurality of user devices through an electronic interface. Further systems and subsystem are established for identifying metadata maintained by the CMS for the stored content objects, and for identifying a generative AI entity (GAIE) to interact with the CMS. On an ongoing basis, the foregoing systems and subsystems carry out steps for (1) forming a GAIE prompt, wherein the GAIE prompt comprises at least a portion of the metadata identified from the CMS for the stored content objects, (2) receiving a response from the GAIE, wherein the response corresponds to the GAIE prompt; and (3) using, by the CMS, the response from the GAIE to implement processing of a content management system workflow.

Abstract: Methods, systems, and computer program products for managing interactions between a content management system (CMS) and a large language model (LLM) system. The semantics of user questions can be considered before prompting an LLM, or alternatively, before querying datasets that are local to the CMS. Given a user question to be answered, the embedding of the user question can be matched against preconfigured sample question embeddings to determine a best match. A prompt corresponding to the determined best match is then configured based on identification of the class or classes that correspond to the matched question. Prompts for provision to LLMs can be synthesized based on a particular user's identity and/or based on the particular user's historical collaboration activities over objects of the CMS. The LLM can be hosted by a third-party provider. Alternatively all or portions of a large language model system can be hosted within the CMS.

Abstract: An improved furniture system, including methods of manufacture, is disclosed. The furniture may be a sofa or a bed, which is reduced to a minimum volume for transportation. A flexible foldable honeycomb structure is used in manufacturing a supporting structure, wherein the hexagonal shape of said structure is strong and stable and provides a high bearing capacity versus weight. The honeycomb structure is designed to be foldable and used for saving space and to be easier for delivery in a box that fits in a small car, wherein said structure used flaccid materials that are glued to each other in certain ways to open and close easily, and wherein the number of layers of the flaccid materials determines the expansion length of the structure.

Abstract: Systems and methods for ransomware protection in collaboration systems. One embodiment operates in conjunction with a collaboration system that manages one or more user devices that store device-local copies of content objects in storage areas of the one or more user devices. The collaboration system is accessed by the one or more user devices to facilitate collaboration activity over the content objects. Patterns of collaboration activity are classified, and in some cases, such patterns are deemed to be indicative of ransomware. If ransomware is indicated to be running on a user device, the collaboration system is notified that a ransomware process has been detected on the user device. The collaboration system delivers a prevention policy to other user devices that interface with the collaboration system. The prevention policy is in turn enforced by the other user devices to prevent synchronization of content object changes made by the ransomware.

Abstract: Methods, systems and computer program products for managing workflows between multiple third-party systems. A content management system stores a workflow that operates over content objects by invoking third-party applications. The content management system invokes these third-party applications, and these applications make modifications to the progression of the workflows as the third-party applications carry-out their specific portions of the workflow. Upon receipt of a workflow variable value from a first third-party application, the content management system determines the semantics of the workflow variable value and caries out a next portion of the workflow. The content management system then invokes a further next portion of the workflow to be carried out by a second third-party application.