Abstract: In one embodiment, a method is performed by a computer system. The method includes receiving a request to execute a particular container. The method further includes retrieving a manifest of the particular container from a data store, the manifest indicating a plurality of items included in the particular container. In addition, the method includes validating one or more signatures of the container that are associated with the items indicated in the manifest. Also, the method includes determining an execution context of the request. Further, the method includes accessing an applicable execution policy for the determined execution context. Additionally, the method includes, responsive to a determination that the applicable execution policy is satisfied, causing the particular container to be installed on a target resource.

Abstract: An optimizer module can function as a proxy between clients and a server that provides access to a service via a REST API. As a proxy, the optimizer module can receive requests from the clients and can combine the requests into a single bulk request that is then submitted to the server. By combining multiple independent requests into a single bulk request, the optimizer module can reduce the total number of concurrent requests and thereby increase the total number of clients that can concurrently submit requests. In some cases, the optimizer module may be configured to apply optimizing rules when generating a bulk request.

Abstract: A system, method, and computer-readable medium for performing an authentication operation comprising: identifying a plurality of user devices associated with a user of an information handling system; determining when at least some of the plurality of user devices are within a predetermined range of the information handling system; and, authenticating the user as an authorized user of the information handling system when at least some of the plurality of user devices are within the predetermined range of the information handling system.

Abstract: A context-aware delegation engine can enable an account owner to identify granular criteria (or context) that will be used to determine what content a delegate will have access to. The account owner can therefore leverage a wide range of information to dynamically determine whether a delegate will receive access to particular content. The delegation engine can be configured to provide a delegation policy to be evaluated to determine whether a delegate should receive access to particular content. Such a delegation policy can be generated based on input provided by the delegator thereby providing the delegator with fine-grained control over which content will be accessible to a particular delegate. The delegation policy can be structured in accordance with an authorization protocol schema such as XACML, SAML, OAuth 2.0, OpenID, etc. to allow the evaluation of the delegation policy to be performed by a policy decision point in such authorization architectures.

Abstract: In an embodiment, a method includes accessing a call tree for a transaction, wherein the call tree traces routines called during execution of the transaction. The method further includes generating a graphical representation of the call tree in relation to two or more performance properties. In addition, the method includes causing the graphical representation of the call tree to be displayed. Further, the method includes allowing a user to graphically select a group of routines from the graphical representation of the call tree. In addition, the method includes creating a filtered call tree comprising the graphically selected group of routines. Furthermore, the method includes generating a drill-down visualization of the filtered call tree. The method also includes causing the drill-down visualization to be displayed.

Abstract: Techniques and mechanisms are provided for migrating data blocks around a cluster during node addition and node deletion. Migration requires no downtime, as a newly added node is immediately operational while the data blocks are being moved. Blockmap files and deduplication dictionaries need not be updated.

Abstract: Solutions for controlling access to computer applications or data are disclosed. For instance, certain systems advantageously secure access to applications and data by not allowing the file to launch if conditions acceptable to opening the file are not met, even when the user or computer has the authority to access the file. In other instances, certain systems advantageously secure access to applications and data by not allowing the file to launch if the user credentials are not validated, even when the conditions acceptable to opening the file are met.

Abstract: A single interface can be provided for accessing resources that are distributed among multiple platforms. Resources that are stored in different platforms and to which a user should have access can be identified. A stub can be created for each identified resource and can include functionality for causing the resource to be opened when the stub is selected. These stubs can then be combined in a single folder or other type of user interface where they can be selected to cause the corresponding resource to be opened.

Abstract: In one embodiment, a method is performed by a computer system. The method includes accessing information related to enterprise usage of a plurality of network-accessible peripheral devices and identifying, from the information, discrete content-imaging events that occurred on the plurality of network-accessible peripheral devices. In addition, the method includes determining particular users associated with the discrete content-imaging events on a per-event basis and determining particular content to which the discrete content-imaging events relate on a per-event basis. Further, the method includes abstracting correlated data related to the discrete content-imaging events into a standardized format, the correlated data comprising data related to the particular users and the particular content, the standardized format enabling expression of the discrete content-imaging events by user and by type of content-imaging activity.

Abstract: During an email migration, a migration engine can identify which emails in the source system are associated with distribution lists. The migration engine can convert any emails that are associated with a distribution list into group content of an appropriate group in the target system. In contrast, for any email that is not associated with a distribution list, the migration engine can migrate the email into a corresponding mailbox in the target system.

Abstract: Techniques and mechanisms described herein facilitate the transmission of a data stream to a networked storage system. According to various embodiments, a determination may be made as to whether an amount of available computing resources at a client device meets or exceeds a computing resource availability threshold at the client device. A processing operation on a data stream may be performed at the client device to produce a pre-processed data stream when the amount of available computing resources meets or exceeds the computing resource availability threshold. The pre-processed data stream may be transmitted to a networked storage system for storage via a network. The networked storage system may be operable to store deduplicated data for retrieval via the network.

Abstract: Mechanisms are provided for maintaining variable size deduplication segments using fixed size extents. Variable size segments are identified and maintained in a datastore suitcase. Duplicate segments need not be maintained redundantly but can be managed by updating reference counts associated with the segments in the datastore suitcase. Segments are maintained using fixed size extents. A minor increase in storage overhead removes the need for inefficient recompaction when a segment is removed from the datastore suitcase. Fixed size extents can be reallocated for storage of new segments.

Abstract: A multidimensional synopsis of a stream of textual data pertaining to a particular subject can be generated. To produce the multidimensional synopsis, multiple dimensions that each includes concepts can be identified. The stream of textual data can then be analyzed to identify the occurrence of the concepts within elements of the stream. The multidimensional synopsis can then be produced by generating a score for each intersecting set of concepts from the multiple dimensions. Therefore, each score can generally represent a prevalence of the corresponding intersecting set of concepts within the stream of textual data.

Abstract: Dynamic user training rules can be employed to organize content within a folder. Each folder can be associated with a dynamic rule that defines a number of attribute and weighting factor associations and a folder threshold. Each attribute and weighting factor association can identify an attribute that is common among the contents of the smart folder and associate a weighting factor with the common attribute. Whenever a user manually moves content into or out of the smart folder, the attribute and weighting factor associations and possibly the folder threshold can be updated accordingly, such as by adjusting a value of one or more weighting factors to better reflect how common they are after the content has been manually moved into or out of the folder. In this way, the dynamic rule is automatically updated in response to the user's interaction with the smart folder.

Abstract: Systems and techniques for displaying timelines of event logs are described. A software application may identify event logs associated with an identifier, such as an IP address of a network element or a username. The software application may group the identified event logs based on specified criteria. The software application may determine multiple sessions in which an individual session includes a group of event logs arranged along a timeline. Sessions associated with a same network element may be displayed with a same magnitude. Sessions associated with different network elements may be displayed with different magnitudes. For example, a first timeline of event logs in a first session at a first network element may be displayed at a first height. A second timeline of event logs in a second session at a second network element may be displayed at a second height.

Abstract: Techniques and mechanisms described herein facilitate the acceleration of data transfer protocols via client side de-duplication techniques for transmitting data from a client device to a networked storage system while maintaining protocol usage characteristics. while preserving the same presentation semantics to the users. A data chunk may be determined at a client device by parsing a data stream generated at the client device via a network storage protocol. A fingerprint for the data chunk may be identified by applying a hash function to the data chunk. A determination may be made as to whether the chunk is stored at a networked storage system by transmitting the fingerprint to the networked storage system via a network. The client device may transmit a block map update request message including information for updating a block map to the networked storage system.

Abstract: In one embodiment, a method includes selecting a plurality of indexes of a database table, receiving an indication of a set of index pairs in the plurality of indexes that are deemed to at least partially overlap, and determining a degree of overlap between the indexes of each index pair. The method further includes determining a suggested merge relationship between the indexes of each of the index pairs. The method also includes generating an index model comprising interconnected index objects. The interconnected index objects represent the indexes of the index pairs. Interconnections between the interconnected index objects reflect the suggested merge relationship between the indexes of each index pair. Moreover, the method includes outputting a graphical representation of the index model. Additionally, the method includes allowing a user to graphically select index pairs to merge in a system-determined order.

Abstract: In one embodiment, a method is performed by a computer system comprising physical computer hardware. The method includes discovering a controlling-user network for at least one user. The controlling-user network comprising a plurality of controlling users. The plurality of controlling users each control one or more sites of a content-management system. The method further includes profiling the plurality of controlling users based, at least in part, on information gleaned from sites on the content-management system controlled by the plurality of controlling users. In addition, the method includes exposing the controlling-user network to the at least one controlling user using a result of the profiling.

Abstract: In one embodiment, a method includes receiving a request to execute a database statement in satisfaction of a time constraint. The method further includes determining a pattern of the database statement. Additionally, the method includes comparing the pattern to pattern metadata associated with cached samples of the distributed database. Also, the method includes, responsive to a determination that the comparing has resulted in one or more matches, selecting a target sample and causing the database statement to be executed on the target sample. The method further includes, responsive to a determination that the target sample resolves the database statement in satisfaction of the time constraint, returning a resulting dataset to a requestor. Moreover, the method includes, responsive to a determination that the target sample does not resolve the database statement in satisfaction of the time constraint, causing a new real-time sampling of the distributed database to be executed.

Abstract: In an embodiment, a method is performed by a computer system. The method includes determining a scope of widget discovery in a content-management system. The method further includes automatically identifying widget instances of the content-management system that are within the determined scope of widget discovery. In addition, the method includes discovering attributes of the identified widget instances on a per widget-instance basis. The method also includes storing in memory widget-instance relationship data comprising the determined attributes of the identified widget instances. Moreover, the method includes receiving a multi-widget-instance change definition, wherein the multi-widget-instance change definition articulates a specified change to unspecified widget instances which share a specified widget-instance attribute.