Abstract: Systems, methods and computer program products for controlling access to data owned by an application subscriber using two-factor access control and user partitioning are disclosed. In one embodiment, applications are executed on a multi-tenant application platform in which user partitions designate associated users and authentication services for those users. Tenants may subscribe to the applications and may allow access to the subscriptions through designated entry points. Users that are authenticated according to the corresponding user partition and access the application through the designated entry point are allowed to access the application through the tenant's subscription.

Abstract: Systems, methods, and computer program products for controlling access by applications to application data are provided. A computing device receives a request for access control data over a network and returns access control data to the requestor to control an applications access over the network to application data. The access control data returned to the requestor includes access-point dependent access control data to control the application's access to the application data based on the access point used to access the network.

Abstract: Responsive to a request from a user device, a content server may perform an electronic discovery function. The request may include information on a quantity of data objects desired from a collection of data objects stored in a repository. Objects stored in the repository may be managed by the content server. The content server may determine a number of batches and process the collection of data objects into batches, each having a batch size. An efficient selection process may be determined and utilized in selecting data objects from each of the batches such that a total number of data objects selected from the collection is not less than the quantity of data objects desired. The content server may make a disk image of the selected data objects and communicate same to the user device over a network.

Abstract: Embodiments as disclosed may provide a search operator that addresses the problems inherent in the searching based on an entire block of text. Specifically, embodiments as disclosed may provide a search operator that may address the problem of complex query construction and efficient and effective implementation for finding objects based on a block of text.

Abstract: Systems and methods are disclosed for a format agnostic document viewer with document translation that provide the ability for a user to either select a portion of the viewed document text in the format agnostic viewer and have it translated into a selected language, or for the user to have the entire document presented in the format agnostic viewer in translated form. The translated text may be shown side-by-side with the original document text in the format agnostic viewer, or can replace the original text on the visible page in the format agnostic viewer. The translated text may be formatted according to, or displayed with, some enhancements to account for differences in the original text and translated text or other differences.

Abstract: A classification system is provided that separates unclassified pages into unclassified, separated documents and classifies the separated documents. The classification system applies a page-level recognition model to the unclassified pages to recognize the logical boundaries between documents and, based on the logical boundaries, separates the pages into unclassified, separated documents. The classification system further applies a document-level recognition model to classify the separated documents.

Abstract: An on-image navigation guide can be generated utilizing coordinates of table data of a table in a document image. The on-image navigation guide enables a user to populate a data entry form with the table data by interacting directly with the document image. The data entry form is configured with the same number of columns as the table and the document image and the data entry form share the same data structure. The on-image navigation guide is presented on top of the document image. As a user navigates the document image, a focus point of the on-image navigation guide moves from table cell to table cell, providing an immediate visual feedback on what is captured in a corresponding data entry field. The on-image navigation guide includes an on-image context menu and a pin through which the user can make adjustments and/or corrections without leaving the document image.

Abstract: A lightweight machine learning model (MLM) microservice is hosted in a cloud computing environment suitable for large-scale data processing. A client system can utilize the MLM service to run a MLM on a dataset in the cloud computing environment. The MLM can be already developed, trained, and tested using any appropriate ML libraries on the client side or the server side. However, no data schema is required to be provided from the client side. Further, neither the MLM nor the dataset needs to be persisted on the server side. When a request to run a MLM is received by the MLM service from a client system, a data schema is inferred from a dataset provided with the MLM. The MLM is run on the dataset utilizing the inferred data schema to generate a prediction which is then returned by the MLM service to the client system.

Abstract: Content is captured and archived at an archive center (AC) and, depending upon records management (RM) policy, is managed by the AC or under RM control by a content server (CS). Both the AC and CS may be part of an enterprise content management system. The AC provides a user-friendly interface through which retention zones may be defined, and functionality for applying RM policy. The functionality can be triggered via a specific content property or through a retention zone under RM control. The RM control can be turned on or off from within the AC using the user-friendly interface. Archived content is not moved or duplicated. Rather, metadata and a link to the storage location are sent to the CS which, in turn, creates a content server document that is linked to the archived content. Only a portion of archived content is exposed to the CS through the AC.

Abstract: A cloud-based, integrated business application suite includes an add-in that enables access from a client device to a first server, but not a second server. A user accesses the first server through an interface of the integrated suite to request a webpage which launches a first local instance of a service application. The first local instance of the service application sets up a local storage location and provides this location to a URL that is used to launch a webpage that is a client of the second server. A second local instance of the service application which is aware of the storage location is launched and this instance stores data requested from the second server in the identified local storage location. The stored information is read from the storage location by the first instance of the service application and is provided to the integrated application suite.

Abstract: A content management system that is configured to receive, over a network, a request from a first application associated with a user to access a container in a content navigation structure, mark a location in the content navigation structure for the user based on activity by the user in the first application, associate a second application with the user and provide the marked location over the network to the second application to enable the second application to access the marked location.

Abstract: Embodiments provide systems, methods and computer program products for cloud replication of data. One embodiment includes, accessing a virtual table definition and a data collection definition, the virtual table definition comprising a definition of a set of virtual table fields and a mapping of the set of virtual table fields to a set of target data types; automatically creating a virtual table according to the virtual table definition, the virtual table comprising the set of virtual table fields populated with the data of interest according to the data collection definition; and sending the virtual table and the mapping to a cloud computing environment. One embodiment further includes, in the cloud computing environment, storing the set of virtual table fields as a set of physical table fields in a physical table in a cloud hosted database, the set of physical table fields having the set of target data types.

Abstract: An entity modeling system integrated with a low-code application development platform may have a web/mobile-based user interface that can run in a browser environment on user devices ranging from desktop computers to smart phones. Users such as a subject matter expert may access an entity model designer tool of the system to model an entity. Responsive to user interaction with an entity composition function, the system may access a data store over a network and generate a view including a collection of entity building block(s) retrieved from the data store. Responsive to the user selecting a first entity building block from the collection to add to the entity, the system may automatically extend the entity to include settings of the first entity building block. The settings may include at least one of a property, permission, action, behavior, or resource to the entity.

Abstract: Embodiments of systems and methods for providing search term suggestions in a search system are disclosed. Embodiments as disclosed may utilize the sound of an original search term to locate candidate terms based on the sound of the candidate terms and the frequency of appearance of the candidate terms in the corpus of documents being searched. A set of search term suggestions can then be determined from the candidate terms and returned to the user as search term suggestions for the original search term.

Abstract: A document production system may construct a document from fragments based on a theme associated with the document. The theme may contain section(s), each section having an access control list (ACL) associated therewith. The ACL may specify role-based user group(s) and permission(s) for the role-based user group(s). The system may evaluate rules applicable to the document. At least one rule may pertain to the ACL(s). The evaluation may include, at least in part, utilizing user login information received over a network from a client device. In constructing the document, the system may assemble the document in accordance with the rules and utilizing the fragments and meta information that describes the document. The system may render the document thus assembled utilizing the ACL, generate a view of the document, and communicate the view of the document over the network to the client device for presentation on the client device.

Abstract: Systems and methods for enabling collection of signed data in a collaborative content sharing platform. One embodiment is a method including producing a form having one or more data entry components and at least one signature block component, selecting assignee users of the content sharing platform, providing the form to the selected assignee users, enabling these users to enter data and sign the form, and storing the assignee users' data in a data structure which is separate from the form, where the data structure includes a record for each assignee user, the record containing data entered by the user and electronic signature data for the user. The data structure is protected in the same manner as other data in the collaborative content sharing platform and may be accessible by some users, but not others, in accordance with their respective roles and authorizations.

Abstract: Several ways are provided for a viewer of a movie to create a deep tag, that is, a bookmark for a segment of the movie. The deep tag can be associated with descriptive text and sent to an address provided by the viewer, either an e-mail address or an instant messaging address. Additionally, before the deep tag is created, it can be checked whether the content owner of the movie is known. If known, the content owner's rules, if any, regarding deep tagging are followed. If unknown, a set of registered content owners can be alerted of the presence of new content. When ownership of the new content is established, the already-created deep tags can be updated in accordance with the content owner's rules, if any, regarding deep tagging.

Abstract: Embodiments provide a web-based editing tool that intelligently leverages certain functionality of a browser, web client, desktop client, and native software at the client side to provide seamless user experience when editing a file over a network. Responsive to a user selecting a file for editing, the web client may send a passive content request to a web server embedded in the desktop client at a specific address on the client device. If no response, the web client prompts the user to start or install the desktop client on the client device. If a response is received, the web client sends a request to the desktop client with a user identifier and authorization to download the file from a server. The desktop client downloads the file, opens it in the native software, monitors the file being edited, and updates a delta associated with the file to the server.

Abstract: A facility for managing a document conversion environment is described. In various embodiments, the facility includes a native application associated with a native document type and an isolation service. The isolation service determines whether a native application associated with the native document type has started and when it has not started, starts the native application and causes the started native application to load and convert a native document to a common document format, wherein the isolation service starts a single instance of the native application and monitors the single instance of the native application so that it complies with specified a parameter, condition, or setting of operation.

Abstract: A template built by a user may be converted by a Server Script Generation Engine (SSGE) into script code. In converting, the SSGE may load and parse a framework file containing static script syntax to locate insertion points, each associated with an iteration number, and may iteratively parse the template, utilizing the iteration number to resolve, in order, tags and sub-tags contained in the template. If a tag is set to respond to the iteration number, a function of the tag is invoked to process any related sub-tags and return a script associated therewith at the appropriate insertion point. The framework file (with the appropriate script code inserted) is compiled and stored in a compiled script object which can be run multiple times to perform all of the output functions expected by the user in lieu of the need to reconvert the template.