Abstract: Disclosed are some implementations of systems, apparatus, methods and computer program products for integrating a collaborative communication system and a document collaboration system. A document within the document collaboration system may be linked to an object within the collaborative communication system. A user post may be received in association with the object or the document. A first feed configured to be rendered in association with the object is synchronized with a second feed configured to be rendered in association with the document such that both the first feed and the second feed each includes the user post.

Abstract: Systems, devices, and techniques are disclosed access to data in multiple instances through a single record. A selection of a record may be received through a user interface. The record may be stored in a database. Aspects of the record may be received from the first database. and displayed on the user interface. A first additional aspect associated with the record may be received from a first instance database associated with a first instance of a secondary application and displayed on the user interface. A selection to switch to a second instance of the secondary application may be received through the user interface. A second additional aspect associated with the record may be received from a second instance database associated with the second instance of the secondary application and displayed on the user interface the in place of the first additional aspect associated with the record from the database.

Abstract: Runtime optimization of grouping operators is described. A system estimates a resource cost for each of multiple grouping operators based on values identified during query runtime, in response to receiving a query request associated with a data stream. The system selects a grouping operator during query runtime, based on a corresponding resource cost, from the multiple grouping operators. The selected grouping operator enables grouping the data stream based on the query request, and outputting a response based on the grouped data stream.

Abstract: Provided is a group-based communication interface configured to allow users of the interface to communicate within group-based communication channels and across group-based communication channels to provide relevant information to other users efficiently and effectively. Group-based messaging communications across the plurality of group-based communication channels can be channeled to specific receiver channels providing relevant information to users of the group-based communication interface thereby increasing the efficiency and effectiveness of group-based messaging communications and the lifetime of the system.

Abstract: Disclosed are systems, apparatus, methods, and computer readable media for suppressing network feed activities using an information feed in an on-demand database service environment. In one embodiment, a message is received, including data indicative of a user action. An entity associated with the user action is identified, where the entity is a type of record stored in a database. A type of the entity is identified. It is determined whether the entity type is a prohibited entity type. When the entity type is not a prohibited entity type, the message data is saved to one or more tables in the database. The tables are configured to store feed items of an information feed capable of being displayed on a device. When the entity type is a prohibited entity type, the saving of the message data, to the one or more tables in the database configured to store the feed items, is prohibited.

Abstract: A system monitors database agents associated with DBMSs running on servers, for example, servers of an organization connected by a network. The system determines whether each database agent is running according to a schedule and whether the database agent is running the correct version of a script. The system may generate a report describing differences between database agents that are running on database instances and a master configuration of database agents representing the expected configuration of the database agent. If a database instance is executing a configuration of a database agent that is different from the master configuration of the database agent, the system updates the database agent executing on the database instance to ensure that the configuration matches the master configuration.

Abstract: A method includes receiving a request to display sets of unread messages associated with a plurality of communication channels of a communication platform, wherein each set of unread messages is associated with a respective communication channel of the plurality of communication channels; receiving a selection to sort the sets of unread messages according to a user-defined sorting scheme for ordering display of the plurality of communication channels in the communication platform; and displaying the sets of unread messages sorted according to the user-defined sorting scheme.

Abstract: A service may leverage a mutual transport layer security (mTLS) service to authenticate a client that is configured with a client certificate chain. The client may request access to the service, and the service may transmit a redirection response to the client. The redirection response may indicate an endpoint for the mTLS service that is associated with the tenant. In response to receiving the redirection response, the client may perform a digital handshake with the mTLS service, and the mTLS service may validate the client digital certificate and digitally sign the client digital certificate. The mTLS may transmit a redirection response, which redirects the client to the service where the client presents an indication of the digitally signed digital certificate chain. The service may validate the chain of trust associated with the digitally signed digital certificate chain and issue an indication that the client is authenticated to access the service.

Abstract: A system for authorizing a serverless application function having a plurality of tenants, each tenant may include one or more entities that share a common access to a processing space and a data store. The system includes a gateway that receives a request from a tenant, an authorization component that access a public key assigned to the tenant, and a serverless processor that generates public and private keys for the tenant. The serverless processor also generates an access token for the first tenant that is signed using the private key and requests a transaction token from the authorization component using the access token. The authorization component transmits a transaction token to the serverless processor, which is used to make further requests to a virtual environment.

Abstract: Described is a method and system for verifying the end-to-end distribution of messages within an on-demand services platform. To provide the ability to monitor and trace such messages, the system may include a specialized and queryable datastore (or database) that allows the system to track the distribution and acknowledgement of messages throughout the services platform. Accordingly, a specialized verification process may be initiated to query the database to verify the receipt of a message has been acknowledged by various components within the system. In addition, the verification process may automatically retry the distribution the messages to ensure particular downstream components have received the message. Accordingly, the system alleviates the need to manual re-crawl various message source to ensure the end-to-end distribution of such messages.

Abstract: Computing systems, for example, multi-tenant systems deploy software artifacts in data centers created in a cloud platform using a cloud platform infrastructure language that is cloud platform independent. The system receives an artifact version map that identifies versions of software artifacts for datacenter entities. The system generates a master pipeline for deploying services on a target cloud platform. The master pipeline includes a change management stage comprising instructions for interacting with a change management system. The execution of the change management stage of a pipeline provides a status of deployment of one or more services to the change management system. The details recorded can be used for auditing, for example, to determine why certain change in the configuration of services of the datacenter was made.

Abstract: Optimizing transaction times for distributed databases is described. A system receives a request which specifies an identifier of a database record associated with a distributed database. If the request is associated with a primary database of the distributed database, any user-defined function is associated with the database record in the primary database, and any associated user-defined function does not require any call that is external to a subnet and/or a firewall associated with the primary database, then the system executes, within the subnet and/or the firewall associated with the primary database, each associated user-defined function for the database record in the primary database. The system outputs a result which is based on executing any associated user-defined functions.

Abstract: Methods, systems, and devices for enabling and validating data encryption are described. A data storage system (e.g., including a database and validation server) may receive an encryption request indicating a data object or data field. Prior to performing encryption, the validation server may perform one or more validations to determine whether the system supports encrypting the indicated data. The validation server may identify any formula fields that directly or indirectly (e.g., via other formula fields) reference the data object or field, and may determine whether each of these formula fields is encryption compatible. In some cases, the validation process may involve synchronously executing a first set of validators, marking the data as pending encryption, and asynchronously executing a second set of validators. Based on the results of the validation process, the system may or may not encrypt the indicated data, and may transmit an indication of the validation results.

Abstract: Clustering-based machine learning is utilized to generate and update permissions data in a computing system. The computing system logs permissions-related user activity for users of the system over time. Feature vectors are generated for the users based on the logs, where each feature corresponds to a specific permission or permission-related operation of the system. A clustering-based learning algorithm analyzes the feature vectors and generates clusters of similar users based on their feature vectors. The permissions of the users may be updated to reflect attributes of the clusters to which they were assigned. For example, the clusters may be utilized to seed and/or update access control groups or other permissions-related user groups in the system. Or, some or all permissions not used by any users within a cluster over a recent period of time may be automatically removed from any user in the cluster.

Abstract: In a multitenant data platform architecture, one or more supporting data tables are used to write and store tenant data responsive to data write requests. Based on the contextual data returning an indication of a data corruption in one or more supporting data structures, an action associated with the data transaction thread is performed. A log of data corruptions and corresponding call stack trace data may be generated. The data transaction thread may be allowed to continue to execute statements that modify data tables, or the data transaction thread may be terminated. Data corruptions may be compensated for by nullifying data changes caused by corruption causing call sites. Verification methods may be used to ensure correctness of data within a transaction thread.

Abstract: A method, apparatus, and system for internet protocol (IP) warming is described. Some systems may send large volumes of communication messages from a single IP address. If the IP address does not have a strong sender reputation, these emails may be sent to spam folders or blocked, and the IP address may be blacklisted. To build a strong sender reputation, a user may implement an IP warming plan for the IP address. To support automated IP warming, an application may identify a target number of communication messages to transmit from the IP address, retrieve communication information for a target set of devices, generate, for the IP address, a set of transmission thresholds corresponding to a set of time durations for transmitting communication messages based on the target number of communication messages and the communication information, and transmit a set of communication messages based on the set of transmission thresholds.

Abstract: Disclosed herein are system, method, and computer program product embodiments for determining a user-preferred attribute type. An embodiment operates by maintaining user-presented attributes associated with user-presented records, wherein the user-presented attributes comprise one or more user-presented attribute types. After receiving a user-desired attribute of the user-presented attributes, a user-preferred attribute type of the user-presented attribute types is determined based on the user-presented attributes and the user-desired attribute. Thereafter, a new record and associated attribute are to be presented with the new attribute being of the user-preferred type.

Abstract: Methods and apparatus for mediating user access to services over a network are described. Access is provided by a service network host to a plurality of connectors providing access to a plurality of services over the network. The services are provided by entities independent from the service network host. The connectors including a first connector are configured to communicate with a first service using a first format to retrieve or modify data associated with the first service. The first connector is further configured to identify one or more methods or data fields of the first service. The service network host is further configured to provide, to a computer associated with a user over the network, one or more directions for using the first connector to display and/or modify data from the first service over the network.

Abstract: Network traffic data associated with data requests to computer applications based on static policies is collected. An optimization order is established among network parameters. A first network parameter of a higher rank in the optimization order is estimated based on the collected network traffic data before one or more other network parameters of lower ranks are estimated. Optimal values for the other network parameters are estimated based at least in part on the estimated first optimal value for the first network parameter. The estimated first optimal value of the first network parameter and the estimated optimal values for the other network parameters are propagated to be used by user devices to make new data requests to the computer applications.