Abstract: Systems, methods, and devices are disclosed herein that provide security for requests sent to services in service meshes. A computing platform may be implemented using a server system. The computing platform is configurable to cause receiving a request from a service in a cloud-based computing environment, and identifying a chain of trust embedded in a portion of the request, the chain of trust being generated by one or more security entities in the cloud-based computing environment, the chain of trust identifying results of one or more security verification operations performed on the request. The computing platform is further configurable to cause determining if the chain of trust is a valid chain of trust based, at least in part, on one or more security policies, and sending the request to another entity in the cloud-based computing environment in response to determining the chain of trust is a valid chain of trust.

Abstract: Garbage collection roots for an application may be identified based on a garbage collector implemented in a programming environment. A garbage collection root may correspond with an object and a class definition. Retained memory values may be determined for the garbage collection roots via a graph dominator. A retained memory value may indicate an amount of memory employed by a garbage collection root. Application classes and associated class memory values may be determined. An application class may include one or more of the garbage collection roots associated with object class definitions positioned within a portion of a class definition hierarchy corresponding with the respective application class. A class memory value may aggregate the retained memory values for garbage collection roots included within an application class. A source of a change in memory usage between application versions may be identified based on the application classes and class memory values.

Abstract: Devices, systems and methods are provided for managing records. One method involves constructing a fuzzy match graph data structure with edges between different field values for a fuzzy matched field of a plurality of records in accordance with a matching rule, assigning unique identifiers to different subgraphs of field values within the fuzzy match graph data structure, determining a match key value associated with a respective record based on a respective unique identifier assigned to a respective subgraph of field values including a respective field value for the fuzzy matched field of the respective record, constructing a heterogenous graph data structure having edges between the respective match key values associated with the respective records of the plurality of records, identifying a subset of related records using the heterogenous graph data structure, and performing one or more actions on the subset of related records at a database system.

Abstract: Usage of Pluggable Authentication Module (PAM) for time bound access control to any PAM enabled Linux application predicated by rules stored in an LDAP directory including a processor to execute computer-executable instructions for receiving a user information from a user interface indicative of a user, receiving an access request via PAM indicative of the user information, a time of invocation of the access request and the host server, querying a lightweight directory access protocol directory in response to the user information and the request, receiving a plurality of attribute values associated with the user information including a time bound access limit and a host access restriction information, and coupling an access success response to the pluggable access module in response to a host server access allowance indicated by the host access restriction information for the host service and the time of invocation being within the time bound access limit.

Abstract: Database systems and methods are provided for parallel processing heterogenous jobs at a database system. One method involves identifying database records corresponding to a batch of jobs and identifying, for the respective jobs, a respective set of related database records associated with the respective job based on a respective value for a metadata field of the respective database record corresponding to the respective job. The metadata field value uniquely identifies the respective set of related database records associated with the respective database record. The method divides the batch of jobs into chunks based on the respective sets of related database records associated with the respective jobs. Each chunk includes a respective subset of the batch of jobs having an aggregate workload based on the respective sets of related database records associated with the respective jobs of the respective chunk that is less than a chunking threshold.

Abstract: Techniques are disclosed relating to storing location information about storage nodes in cookies. A cloud-based service may send location requests to an orchestration service that instantiated storage nodes included in a storage cluster of the cloud-based service. The cloud-based service may receive location information that identifies in which computer zone that a given storage node is located. The cloud-based service may store the location information in cookies at a metadata store that is shared among the storage nodes. The cloud-based service may receive, from a client node, a search request to identify ones of the storage nodes that store particular data. The cloud-based service may return a set of cookies corresponding to identified storage nodes. The set of cookies may enable the client node to determine whether there is a storage node that stores the particular data and is within the same computer zone as the client node.

Abstract: Some embodiments comprise integrating information from a social network into a multi-tenant database system. A plurality of information from the social network is retrieved, using a processor and a network interface of a server computer in the multi-tenant database system, wherein the plurality of information is associated with a message transmitted using the social network. Metadata related to the transmitted message is generated, using the processor. A conversation object is generated, using the processor, based on the plurality of information associated with the transmitted message and the metadata related to the transmitted message. The conversation object is then stored in an entity in the multi-tenant database system, using the processor of the server computer.

Abstract: Disclosed are some implementations of systems, apparatus, methods and computer program products for generating and implementing computational graphs that facilitate concurrent computation on data streams. A computational graph includes a plurality of nodes, where each node has one or more stages associated therewith. Each stage may be associated with a corresponding operation that is to be performed on data associated with that stage.

Abstract: A database system is disclosed. The database system may receive a plurality of records representing changes made to a plurality of datasets, and the plurality of records may include a plurality of data change instances associated with a plurality of data schema types. The plurality of data change instances may correspond to a plurality of respective keys. The database system may compute an average size of data for each data schema type of the plurality of data schema types. The database system may modify the plurality of respective keys through a salting process, which may include assigning non-overlapping numerical ranges to subsets of the plurality of respective keys. The database system may sort, using the non-overlapping numerical ranges, the plurality of data change instances into a plurality of partitions of a target file size. The database system may write files of the target file size to a data store.

Abstract: A method and system uses a test cloud system for monitoring cloud to cloud performance. The method includes initiating a first trust relationship by the test cloud system with a first target cloud system, receiving a success indicator for the trust relationship, in response to the first target cloud verifying the test cloud system is whitelisted, generating a security token using a private key of the test cloud system, and invoking a function of an application programming interface of the first target cloud using the security token to validate functionality of the function of the application programming interface of the first target cloud.

Abstract: Implementations(s) for deploying application(s) are described. Responsive to an indication to install a specific instance of an application registered in a registry, first and second code are retrieved from the registry to cause the installation. Responsive to the first and second code, it is detected that the first code is executable to receive information that will be generated responsive to execution of the second code; the specific instance of the second part of the application is caused to be deployed on the second technology stack (TS) using the fourth code identified in the second code; the information is received; and a specific instance of the first part of the application is caused to be deployed on the first TS using the third code identified in the first code and to be configured to communicate with the specific instance of the second part of the application using the information.

Abstract: Media, methods, and systems of recommending personalized help content within a group-based communication system. A machine learning model trained with prior user interaction data and historical user engagement data is used to generate a list of recommended help content based at least in part on received user interaction data for a user.

Abstract: Disclosed are some examples of systems, methods, and computer program products for suggesting actions for evaluating user performance in a social networking system. In some implementations, textual input of a social media message is processed. The processing can include determining that data of the textual input indicates an evaluation of performance of a user of the social networking system. A prompt can be displayed, requesting submission of information evaluating performance of the user. A performance evaluation record can be generated or updated in a database to store the evaluating information in association with an identification of the user, and an indication of the evaluating information can be shared in a feed of the social networking system.

Abstract: Methods, systems, apparatuses, and computer program products are described. A system, such as a multi-tenant database system, may store tenant-specific observability data for multiple tenants of the system. The system may detect an inefficiency related to a performance metric for a tenant of the multiple tenants based on a subset of the data associated with the tenant and corresponding to a threshold time window. In some examples, the system may analyze the subset of the data for the threshold time window to determine an insight indicating a cause of the inefficiency. The system may determine a suggested action for the tenant based on the insight indicating the cause of the inefficiency, and the system may send, for display at a user interface of a user device, an indication of the insight and the suggested action, the user device operated by a user associated with the tenant.

Abstract: An application server may receive an input document including a set of input text fields and an input key phrase querying a value for a key-value pair that corresponds to one or more of the set of input text fields. The application server may extract, using an optical character recognition model, a set of character strings and a set of two-dimensional locations of the set of character strings on a layout of the input document. After extraction, the application server may input the extracted set of character strings and the set of two-dimensional locations into a machine learned model that is trained to compute a probability that a character string corresponds to the value for the key-value pair. The application server may then identify the value for the key-value pair corresponding to the input key phrase and may out the identified value.

Abstract: A document object may be transmitted to a plurality of user devices. The document object may include at least one field for display of a content object of a group of content objects. The field may be associated with an identifier corresponding to the group of content objects. When the document object is accessed, then the access may trigger a request to a server, which may select a content object of the group of content objects using a content object identification function. The content object identification function may be dynamically updated based at least in part on the document object being accessed by one or more of the plurality of user devices. Responsive to the request, a unique content object identifier corresponding to the selected content object may be transmitted to the user device and displayed at the accessed document object.

Abstract: An application for creating an editing a knowledge graph for document retrieval and exploration. The application may create a data structure, arranged as a directed acyclic graph (DAG), based on user input indicative of categories within a taxonomy and documents within an information repository. The DAG may have a top-level node, interior nodes, and leaf nodes. Interior nodes correspond to taxonomic classifications and point to other interior nodes or leaf nodes. Leaf nodes have corresponding interior nodes and include links to one or more documents in the information repository. The application permits editing of nodes, but does so in a way that preserves links to the arrangement of nodes prior to the editing. The application also permits traversal of nodes of the data structure via a user interface in which a representation of a given node includes an indication of one or more possible paths for reaching the given node.

Abstract: Users may be authorized to access a second software environment with a second limited set of authorized users. The second software environment may include at a first point in time prior to the user access a subset of a first software environment that includes at the first point in time a first set of authorized users that was a superset of the second limited set. A determination may be made as to whether a first user has potentially been a member of the first set of authorized users. The determination may be made via a global filtering process with at least one first hash value associated with a login attempt by the first user whether.

Abstract: A header and a timestamp element for the header may be generated based on a request to process data for a page of a user interface. A tooltip with descriptive information for the timestamp element may be generated and displayed based on proximity of an interactive element to the timestamp element, and a page representation window may be displayed based on an interaction with the timestamp element. The page representation window includes a representation of the data field and its content that is indicative of how the data field and its content existed at a time of the request to process data. Moreover, an indicator of correspondence between the timestamp element and the page representation window may be displayed. Based on interaction with a settings indicator element, a header settings window for modifying settings for the header may be displayed with view options (e.g., all, custom, etc.) for data submissions.