Abstract: Systems and methods for managing recent data items in a database. A method typically includes determining whether a data object managed by an on demand service is designated as able to be accessed by a user at a mobile device and storing locally at a mobile device a plurality of most recently used items viewed for a data object designated as able to be accessed by a user at a mobile device. The method also typically includes determining a single most recently used set from among the stored plurality of most recently used items viewed for at least one data object designated as able to be accessed by a user at a mobile device.

Abstract: Disclosed are examples of systems, apparatus, methods and computer program products for batch job processing using a database system. In some implementations, a data object relationship structure of a first record can be identified. Based on a type of data dependency of the data object relationship structure, a first record and a second record can be determined to be associated. A first batch number can be assigned to the first record and the second record. A first batch job can be defined. It can be determined that a third record is not associated with the first record. A second batch number can be assigned to the third record and a second batch job can be defined.

Abstract: Disclosed are examples of systems, apparatus, methods and computer program products for overriding component attributes in a web application builder. A database system maintains a multi-tenant database associated with a number of users and a number of web application components each with one or more component attributes. The system displays a user interface for the web application builder framework with a layout including a number of web application components, and processes decorator rules for rendering the components. The system also processes decorator override rules for some attributes of the components. The system displays the prepared user interface with decorator rules and overrides, and, based on a user request to access one or more attributes of the components, presents those attributes for display with the decorator override rules applied.

Abstract: Network traffic data associated with computer applications is collected based on static policies. First network parameter vectors are generated over a time period. Each network parameter vector of the first network parameter vectors comprises first optimal values, estimated by a Bayesian learning module using a generative model, for network parameters. Second network parameter vectors are generated over the same time period. Each network parameter vector of the second network parameter vectors comprises second optimal values, computed by a best parameter generator through optimizing an objective function, for the network parameters. It is determined whether the first network parameter vectors converge to the second network parameter vectors and whether network parameter optimization for the network parameters is performing normally.

Abstract: A method of collecting data from multiple sources in a multi-tenant system is provided.

Abstract: According to an implementation of the disclosure, a computing device may record substantially all the network traffic being transported over a first node of a network over a period of time. The computing device may receive an authenticated request from a forensics system that includes access criteria. The first computing device may determine a relevant encrypted and unencrypted portion of the network traffic based on the access criteria. Based on unencrypted portion, the computing device may recalculate an encryption key applicable to the encrypted portion. The computing device may then replicate the relevant portion and the encryption key to the forensics system for forensic analysis.

Abstract: An attempt by a user to login to a destination server is identified from a source server. A destination score is determined based on the count of attempts by the user to login to the destination server and the count of attempts by the user to login to all destination servers. A source given destination score is determined based on the count of attempts by the user to login from the source server to the destination server, and the count of attempts by the user to login to the destination server. An outlier score is determined based on values associated with the destination score and the source given destination score. An alert is output if the outlier score satisfies a threshold.

Abstract: The technology disclosed describes systems and methods for implementing global profiling to track resource usage and performance for multiple threads across multiple servers for a cloud-based system. This disclosed technology provides global profiling to track resource usage across any part of a transaction as it passes between layers of a computing stack regardless of the language being executed, on logically different virtual machines across multiple servers. After data collection stops, the disclosed technology combines the results into a configurable profile view that accurately represents the order of execution of applications and methods, as though they ran on one machine. The disclosed technology builds multiple formats of the data files for different display visualizations.

Abstract: Disclosed are examples of systems, apparatus, methods and computer program products for providing user-customizable permissions governing user access to computing resources in a computing system. For example, a database storing data objects identifying permissions of users, sets of the permissions, and users can be maintained. One or more fields can be displayed on a display of a user device. The one or more fields can be configured to receive input to perform one or more operations. Input can be received from a user via the user interface on the display of the user device. One or more operations can be performed. The database can be updated such that the data objects identify a custom permission or a permission set to which a custom permission has been assigned.

Abstract: A method for presenting search results is provided. The method receives a user input search query; obtains, from a search engine, a first set of search results responsive to the user input search query; efficiently identifies a promoted set of search results for promotion using a set of search promotion rules, each of the set of search promotion rules including a set of terms and one or more document identifiers; revises the first set of search results, based on the identified promoted set, to create a second set of search results; and presents the second set of search results, wherein the second set of search results includes the first set of search results and the promoted set in a promoted position.

Abstract: One or more implementations relate generally to a platform architecture planning process utilizing architecture type unit definitions. For example, an architecture for realizing a customer system on a cloud computing platform may be defined in terms of a plurality of architecture types, each type (AT) defined by plural architecture type units (ATUs), and each ATU comprising a set of ATU Details.

Abstract: A computing system may create a database schema representing tables for data assessment, organization identification (ID), rule ID, data source ID, and data assessment ID. The data assessment table may include a first field representing an organization ID, a second field representing a rule ID, a third field representing a data source ID, wherein the fields correspond to a records in the organization ID table, rule ID table and data source ID table, respectively. The data assessment table may also include a fourth field representing a match status indicating whether a record in data assessment ID table matches a record of a data source associated with the third field, a fifth field representing a data assessment record ID and corresponding to a record in data assessment record ID table, and a sixth field configured as a column family and representing a field of the business object.

Abstract: Disclosed are some implementations of systems, apparatus, methods and computer program products for facilitating data migration. Data migration is customizable according to user-specified data formats. A data migration system monitors the data migration process and automatically retries data migration tasks that have failed. In addition, the results of data migration are reversed according to detected threshold conditions.

Abstract: Apparatuses and techniques to utilize a scratch organization as a unit of virtualization. Potential hosts for a scratch organization are evaluated. The potential hosts include at least the first group of hardware processing devices and a second group of the plurality of hardware processing devices to provide remote client computing environments. A target host is selected from the potential hosts. The scratch organization to be hosted by the target host is generated. Data is loaded from a test source that is not the subject organization into the scratch organization. One or more test operations are performed on the scratch organization using the loaded data with the target host. The scratch organization is destroyed on the selected host after the one or more test operations have been performed.

Abstract: Systems and methods for broadcasting events are provided. The system, for example, may include, but is not limited to, a communication system, a memory, and a processor. The processor may be configured to receive, from the communication system, a session identifier identifying a broadcast session and at least one application event corresponding to the broadcast session from a presenting electronic device, update a playback queue corresponding to the broadcast session stored in the memory based upon the received at least one application event, receive, from the communication system, a subscription request to the broadcast session from at least one subscribing electronic device, and transmit, via the communication system, a corresponding playback queue to each electronic device subscribed to the broadcast session, the playback queue including instructions to regenerate the application event within an application operating on the at least one subscribing electronic device.

Abstract: Disclosed are examples of systems, apparatus, methods and computer program products for configuring service consoles based on service feature templates using a database system. In some implementations, a database of a database system storing service feature templates can be maintained. A request for a service console comprising a console component can be processed. A service feature template comprising a template console component corresponding to the console component can be identified. A set of CRM records can be identified. It can be determined that a user has access to the console component. A graphical representation of the service console can be displayed in a user interface on a display of a device of the user.

Abstract: During runtime of the software application, the runtime analysis framework may assign input tags to objects associated with the user requests. The input tags may identify the requests as potentially malicious and carry a security risk. The RTA framework then may assign sanitization tags to the objects identifying security checks performed on the objects during runtime. The RTA framework identifies output responses to the user requests that include the objects and compares the input tags assigned to the objects with any sanitization tags assigned to the objects. The RTA framework may identify the software application as susceptible to a security vulnerability when the input tags for the objects do not include corresponding sanitization tags.

Abstract: Disclosed are examples of systems, apparatus, methods and computer program products for providing a user interface customizable to define state transitions of panes in a bounding window. For example, a bounding window including one or more resizable panes is displayed in a user interface on a display device. Breakpoints situated at respective spatial positions in the bounding window are graphically represented in the user interface. Each breakpoint defines a transition of a pane from one state to another when the pane is resized to traverse the breakpoint. The spatial position of one or more of the breakpoints can be updated in accordance with a request indicating user customization of breakpoints.

Abstract: A runtime analysis framework (RTA) stores a hierarchical list of input tags and a hierarchical list of output tags. The RTA stores defined vulnerabilities that include associated input tags and output tags. During runtime the software application may receive a request from a user system. The RTA assigns an input tag from the hierarchical list of input tags to an object associated with the request and assigns an output tag from the hierarchical list of output tags to a method generating a response to the request. The RTA identifies one of the defined vulnerabilities as a potential vulnerability if the assigned output tag and output tag associated the potential vulnerability are in a same subtree of the hierarchical list of output tags and the assigned input tag and the input tag associated with the potential vulnerability are in a same subtree of the hierarchical list of input tags.

Abstract: Threat detection in a multi-organizational environment. Attribute data corresponding to accesses to a multi-organizational environment and entity data corresponding to accesses to the multi-organizational environment are maintained. A graph based on the attribute data and the entity data where graph edges represent a relationship between an attribute and an entity is generated. Subsequent access are compared to the graph to determine if the subsequent access corresponds to a new relationship. The subsequent access is allowed if the subsequent access does not correspond to a new relationship. The subsequent access further analyzed if the subsequent access corresponds to a new, unexpected relationship.