Abstract: System and method for fine granularity control of data access and usage for across multi-tenant systems. A user makes a request to access a particular set of data from a particular remote data source for a specific purpose. The system authorizes the user to validate whether the user is qualified to make the request. The data source is checked to see if the particular data has been granted access for that particular purpose. A cloud neutral token is created and converted into a cloud specific token upon reaching the remote data source. The cloud specific token is used to create a temporary IAM role and IAM policy with a predetermined time to live. After the time to live expires, the IAM role and IAM policy are deleted.

Abstract: System and method for fine granularity control of data access and usage for across multi-tenant systems. A user makes a request to access a particular set of data from a particular remote data source for a specific purpose. The system authorizes the user to validate whether the user is qualified to make the request. The data source is checked to see if the particular data has been granted access for that particular purpose. A cloud neutral token is created and converted into a cloud specific token upon reaching the remote data source. The cloud specific token is used to create a temporary IAM role and IAM policy with a predetermined time to live. After the time to live expires, the IAM role and IAM policy are deleted.

Abstract: A method that includes receiving a first request for a data object associated with a communication process flow that controls electronic communications between a tenant and a set of users corresponding to the tenant. The first request may include a set of querying parameters and a set of triggering parameters. The method may further include querying, based on the set of querying parameters, a communication process flow management service for data associated with the communication process flow. The method may further include generating, based on the querying, the data object that includes the data associated with the communication process flow. The method may further include transmitting, to a communication platform in accordance with the set of triggering parameters, a second request that comprises the data object. The second request may cause posting of an entry of the data object into a communication channel of the communication platform.

Abstract: A system provides a framework for testing template code processed by a templating engine. A multitenant system may use template code for implementing Infrastructure as Code (IAC), for example, to generate pipelines for deploying software or provisioning resources for a datacenter configured in a cloud platform. The system sets the search path in a template engine environment object dynamically for each template file. The system allows testing of macros used by the template engine. The system converts the macros to callable entities that can be invoked by test cases. The system allows developers to finding code defects earlier and increase application availability. The system provides flexibility in testing and automation in running the tests. Furthermore, the system allows a separation of production code with unit tests.

Abstract: Apparatus and method for a scalable pricing engine. A scalable pricing engine is operable in a low-scale mode and a high-scale or scalable mode to process pricing data in response to pricing requests. The pricing engine operates in a first runtime environment in the low-scale mode in which it can service pricing requests up to a threshold number and in which the pricing data can be updated and tested. The pricing engine also operates in a second runtime environment which is a scalable runtime supporting pricing requests above the specified threshold. The scalable runtime and pricing engine rely on a scalable read-only data service which distributes a read-only copy of at least a portion of the pricing data from the primary database, a high-scale cache to reduce access latency, data processing and network resource allocations, and data reduction techniques when processing requests and responses.

Abstract: A computing device receives a user input to add a data visualization to a first visualization card in a first scene of an interactive presentation. In response to the user input, when the first scene is an initial scene to be added, the device computes, for each metric of a plurality of metrics, a respective parameter that measures the variability of values of the respective metric, and identifies a first subset of metrics based on the computed parameters. The device generates a respective data visualization for each metric. The device displays a plurality of the generated data visualizations. The device receives user selection of a first data visualization of the plurality of data visualizations, corresponding to a first metric of the subset of metrics. In response to the user selection, the device populates the first visualization card with the first data visualization.

Abstract: Dialogue summarization is challenging due to its multi-speaker standpoints, casual spoken language style, and limited labelled data. The embodiments are directed to a coarse-to-fine dialogue summarization model that improves abstractive dialogue summarization quality and enables granular controllability. A summary draft that includes key words for turns in a dialogue conversation history is created. The summary draft includes pseudo-labelled interrogative pronoun categories and noisy key phrases. The dialogue conversation history is divided into segments. A generate language model is trained to generate a segment summary for each dialogue segment using a portion of the summary draft that corresponds to at least one dialogue turn in the dialogue segment. A dialogue summary is generated using the generative language model trained using the summary draft.

Abstract: Described herein is a system and method for capturing data associated with actions attempted by an automated agent. The system described herein captures data associated with the actions attempted by an automated agent during the messaging session between an automated agent and the user and present a summary of the actions in a messaging platform. In an embodiment, the automated agent uploads data associated with actions attempted during the messaging session to a server. The server captures the data associated with the actions and generates a description of each action that was attempted. The server generates a summary including the description of each action. The summary of the actions are rendered in the messaging platform.

Abstract: Disclosed herein are system, method, and computer program product embodiments for providing asynchronous backend processing of complex, time consuming, and/or expensive jobs. A command line interface (CLI) provides a command interface between a user and a backend processing server. The CLI sends a job request to the backend server, which immediately replies to the request with a confirmation message that includes a job identifier. This response is sufficient to allow the CLI to end its wait for the job response. Meanwhile, the backend server carries out the job by parsing the job into component tasks according to a declaration file and assigns those different tasks to different work servers. The backend server functions as a master server, tracking the statuses of the different tasks and assigning out new tasks until the job is complete. An overall job status is provided to the CLI upon request by referencing the job identifier.

Abstract: A method and system for generating a digital access token consumable by a piggy-back service system has been developed. A request for a digital access token for a client is received. The digital access token is associated with a tenant. At least one standard claim associated with a client attribute of the client is generated. The digital access token includes a header, a payload, and a signature. The payload includes the at least one standard claim associated with the client attribute. The digital access token enables the piggy-back service system to independently authorize access by the client to at least one service at the piggy-back service system based on the at least one standard claim. The digital access token is transmitted to a first device associated with the client.

Abstract: Techniques are provided for thwarting attackers in a computing system which uses network management interfaces (NMIs). Before submitting NMI form data, a user computing device queries a server using a user id to obtain a signature which defines a shuffling map and random data such as a random key. The NMI form data is divided into portions and the random data is appended to each portion to provide respective data units, or buckets of data. The data units are then shuffled according to the shuffling map before being transmitted to a server, with the signature or an identifier of the signature included in a header. At the server, the data units are unshuffled to recover the data units, and the random data is removed to recover the form data portions. The instructions of the form data can then be executed.

Abstract: Disclosed are some implementations of systems, apparatus, methods and computer program products for implementing a bi-level subscription process. A server computing device subscribes to a global topic. The server computing device receives a discovery message published to the global topic, where the discovery message specifies an instance name, a data center, and an instance URL. The server computing device subscribes to a regional topic having the instance name. The server computing device receives a metadata message published to the regional topic having the instance name, where the metadata message includes a tenant identifier, source information pertaining to a source from which events are to be obtained, and destination information pertaining to a destination via which the events are to be transmitted. The server computing device stores the source information and destination information in association with the tenant identifier, obtains events from the source and transmits the events to the destination.

Abstract: Message moderation is described herein. In an example, a message posted to a virtual space of a communication platform can be flagged for review by a reviewer (e.g., an administrator or other user permissioned to review messages). In some examples, such a reviewer can review a flagged message and determine one or more actions to be performed. Such actions can include removing the message from presentation via the communication platform, modifying presentation of the message via a user interface of the communication platform, replying to the message (e.g., to suggest taking the conversation offline or to another virtual space), disabling interaction with the message, and/or the like. Message moderation, as described herein, can streamline resolution of conversations that become out of hand and/or off topic.

Abstract: An object interface for quick access to object(s) of a communication platform is described. Server(s) of the communication platform can receive, in association with a user interface of the communication platform, a request to associate an object with an object interface associated with a virtual space of the communication platform. The server(s) can cause one or more objects to be presented via the user interface and can receive a selection of a particular object from the one or more objects. The server(s) can cause, in response to the selection, a user interface element representative of the particular object to be associated with the object interface, wherein the user interface element is associated with an actuation mechanism that, when actuated, causes the particular object to be presented via the user interface. Notifications associated with the particular object can be indicated by annotation(s) to the user interface.

Abstract: Systems, devices, and techniques are disclosed for maintaining service availability. Files including code written using a Domain Specific Language (DSL) for network security may be received. A knowledge graph including connections between services may be generated from the code written using the DSL in the files. A service that will have an availability issue may be determined based on the connections between services in the knowledge graph. The service that will have the availability issue may be replicated. The replication of the service that will have the availability issue may occur before the service has the availability issue.

Abstract: Techniques are disclosed relating to a database recovery routine to start up a database system in response to a database failure. The database system accesses checkpoint information identifying a set of active database transactions that were active at a flush point that occurred before the database failure. As a part of the database recovery routine, the database system replays database transactions that occurred between a recovery point and the flush point. The database transactions include the set of active database transactions but exclude any committed or aborted database transactions that occurred between the recovery point and the flush point such that less than a total number of database transactions occurring between the recovery point and the flush point are replayed. The database system further replays, without excluding committed or aborted database transactions, database transactions occurring between the flush point and a recovery end point at which the database failure occurred.

Abstract: Methods, systems, and devices for data processing in a computing system are described. The computing system may receive a notification of an update to network security objects hosted in diverse substrates within the computing system. The computing system may retrieve a network security policy for a service instance impacted by the update. The computing system may update the network security policy for the service instance according to a network security configuration of the hosting substrate. The computing system may translate the updated network security policy into access control lists (ACLs) for network entities managing communications between service instances within the computing system. The computing system may store the ACLs in respective data repositories that are accessible to the network entities. The computing system may transmit a notification that the ACLs are available for deployment, thereby causing the network entities to retrieve the ACLs from the respective data repositories.