Abstract: Content packages (including, e.g., visualizations, models) are replicated from one landscape to another that is restricted. The restricted landscape may be governed by regulations relating to privacy or other concerns. For package replication, a poll-pull mechanism is applied. Specifically, the first landscape creates a replicate package job targeting to the restricted landscape. The restricted landscape periodically polls and checks for any replicate package job for targeted for it. If any targeted replicate package jobs are discovered by polling, the restricted landscape will pull the job details to create a new replicate package job in its own (restricted) landscape. Under this approach, even though the replicate package job was initiated in the first landscape, it will be executed in the restricted landscape, thereby conforming to any governing regulations.

Abstract: Systems and methods include determination of a plurality of features, determination, for each of the plurality of features, of a feature vector based on a taxonomy of logical entities, combination of the determined feature vectors into a composite feature vector, determination of an operator based on the composite feature vector, and determination of a new feature based on the operator.

Abstract: Various examples are directed to systems and methods using a database management system. The database management system may generate a root certificate for a database host of the database management system and a first host certificate using the root certificate. The database management system may receive, from a first client associated with the first tenant, a request to access the root certificate stored at a root certificate storage location and send the root certificate to the first client. The database management system may receive, from the first client, a request to establish a secure communication connection. The secure communication connection with the first client may be established at least in part by providing the first host certificate to the first client.

Abstract: The present disclosure involves systems, software, and computer implemented methods for compressed columnar data search using fingerprints. One example method includes compressing columnar data that includes dividing the columnar data into multiple data blocks and generating a fingerprint for each data block, storing the compressed columnar data and the generated fingerprints in an in-memory database, receiving a query for the columnar data, for each in-memory data block stored in the in-memory database, determining whether the in-memory data block satisfies the query and in response to a determination that the in-memory data block does not satisfy the query, pruning the in-memory data block from the multiple data blocks to generate an unpruned set of data blocks, decompressing the unpruned set of data blocks, and performing a query search on the decompressed unpruned set of data blocks for the received query.

Abstract: Techniques and solutions are provided for improving query performance of queries that can dynamically switch between accessing different data sources for a particular operation. The disclosure provides an object type, which can be referred to as a configuration object, that specifies which of multiple data sources should be used in query execution at a particular point in time. Values that specify a data source can be included as data in an instance of the object type, such as values in a relational database table that implements the configuration object. A data source to be used with a query can be changed dynamically by updating contents of the table. During query optimization, a query optimizer can recognize that the configuration object is of a particular type that causes the query optimizer to access contents of the configuration object. The contents can be used to prune portions of a query plan.

Abstract: In one embodiment, a first entry in a first database is modified to include data from a highest-ranked one of one or more available data tables that correspond to the first entry. Each of one or more characters fields of the modified first entry are converted into a respective one or more first-entry tokens, and each of one or more character fields of each of a plurality of second entries in a second database is converted into a respective one or more second-entry tokens. The first-entry tokens are compared to the second-entry tokens, and, in response to the comparison, it is determined whether the first entry matches one of the second entries. In response to determining that the first entry matches one of the second entries, the first entry and the matching second entry are associated with one another in one or both the first and second databases.

Abstract: Code injection is a type of security vulnerability in which an attacker injects client-side scripts modifying the content being delivered. A sanitizer function may provide defense against such attacks by removing certain characters (e.g., characters causing state transitions in HTML). A string sanitizer may be modeled in order to determine its effectiveness by obtaining data flow information indicating string operations that used an input string or information derived therefrom, including a string sanitizer function. A deterministic finite automata representing string values of the output parameter may be generated based on a graph generated from the data flow information, where the automata accepts possible output string values of the sanitizer. It can be determined whether there is a non-empty intersection between the automata for the sanitizer output and an automata representing a security exploit, which would indicate that the sanitizer function is vulnerable to the exploit.

Abstract: Various examples are directed to systems and methods for performing data object operations in an enterprise resource planning (ERP) application. The ERP application may receive an instruction to perform a transaction associated with a data object stored at a database management system. The ERP application may initiate execution of a transaction manager that is to manage a transaction stream buffer. A first processing pipeline may be executed for the transaction. The first processing pipeline may execute a first processing unit, where the executing of the first processing unit comprises accessing first processing unit input data from a transaction stream buffer and writing first processing unit output data to the transaction stream buffer. The transaction manager may initiate a save process to write the first processing unit output data to the data object stored at the database management system.

Abstract: The present disclosure involves systems, software, and computer implemented methods for integrated data privacy services. An example method includes determining, by a data privacy integration service, a condition that has occurred from performing a data privacy integration protocol that indicates that a first object is to be redistributed to applications in a multiple-application landscape. Application responder group configurations are identified that group the applications into multiple redistribution responder groups for performing redistribution operations for an object type of the first object in response to redistribution requests. A redistribution command to redistribute the first object is sent to each application in a first redistribution responder group.

Abstract: The present disclosure involves systems, software, and computer implemented methods for integrated data privacy services. An example method includes receiving a request to initiate a data privacy integration protocol for applications in a multiple-application landscape. Voting responder group configurations are identified that group the applications into multiple voting responder groups for performing voting for the protocol. A voting request for the protocol is sent to applications in a first voting responder group. Data privacy integration protocol votes are received from the applications in the first voting responder group and a determination is made as to whether any application in the first voting responder group provided a veto vote for the protocol. If at least one application in the first voting responder group provided a veto vote for an object, the protocol is ended for the object without sending a voting request to applications in a second voting responder group.

Abstract: The present disclosure provides improved systems, methods, and computer readable media for blending data from data sets that reside on different systems. This is done by generating subqueries from a main data model blend query, sending the subqueries to respective separate systems, accessing the results to all subqueries at a primary system, and performing a blend based on the main data model blend query at the primary system.

Abstract: A method may include parsing, using a JavaScript Object Notation (JSON) parser implemented on a field programmable gate array (FPGA), a JSON document. The parsing includes dividing an input string comprising the JSON document into one or more data blocks and annotating the characters included in each data block a bitmap for each data block. String characters included in the data blocks may be identified, based on the bitmap associated with each data block, for writing to a string array. Numeric characters included in the data blocks may be transformed, based on the bitmap associated with each data block, into integers value for writing to an integer array or float values for writing to a float array. A tape including a binary representation of the JSON document may be generated based on the bitmap associated with each data block. Related systems and computer program products are also provided.

Abstract: Techniques and solutions are provided for processing query requests from a software application, such as one having a user interface model, using an analytical data protocol that accesses an analytic query. Often, user interface models access data using transactional data protocols, which can limit analytical actions that can be performed through a user interface, particularly actions altering data presented or a data format as compared with pre-defined analytical objects. A query request associated with a user interface query model is received and converted to be executable using at least one analytical query model object. The request, in an analytical protocol, is submitted to a virtual data model. The query request in the analytical protocol is converted to be used with an analytic query defined in the virtual data model. The converted query request is executed against a data store and query results are returned to a user interface layer.

Abstract: Techniques and solutions are provided for providing software application functionality allowing users to perform analytical data operations. Software applications typically limit users to interacting with predefined data. Disclosed techniques allow users retrieve new data, or process data in different ways, by accessing lower-level objects, such as analytic queries defined in a virtual data model. An object of a data model defined for a collection of graphical user interfaces can be used to identify an analytical data object providing access to data defined by the data model. A query is executed to retrieve data corresponding to at least a portion of attributes defined in the data model. At least a portion of retrieved data is displayed. User input is received that requests a pivot operation, an operation to add a filter, or to add a multidimensional data element of the analytical data object to the graphical user interface display.

Abstract: Systems and processes for managing an information retrieval database are provided. In a method for modeling a data object storing table relationships for tables belonging to a computer application, a first set of table links are retrieved from the data object and an enhanced set of table links are generated by appending additional table links to the first set based on linkages within the tables and/or code extensions/add-ins. A first set of field links are generated for the data object by matching metadata of the enhanced set of table links, and an enhanced set of field links are generated by performing additions, deletions, or replacements within the first set based on characteristics of the field links in the first set and/or code extensions/add-ins. A model for the data object is generated, representing the enhanced set of table links and the enhanced set of field links, and stored in a database.

Abstract: Some embodiments provide a non-transitory machine-readable medium that stores a program executable by a device. The program receives a request to process an image for multiple objects. The program further uses a machine learning model to detect a plurality of objects in the image. The program also generates a plurality of images based on the plurality of objects in the image. For each image in the plurality of images, the program further converts text in the image to machine-readable text. For each image in the plurality of images, the program also uses a set of machine learning models to determine a set of values for a set of attributes. For each set of values determined for the set of attributes, the program further generates a record comprising the set of attributes and storing the set of values for the set of attributes in the record.

Abstract: Methods and systems may be associated with a cloud platform computing environment. A mapping expression data store may contain mapping expressions previously created by customer tenants of the cloud platform. Each mapping expression may be associated with at least one source mapping element and at least one target mapping element. A mapping expression generator may receive, from a user of a first customer tenant, a mapping expression search request that includes at least one requested source mapping element and at least one requested target mapping element. The mapping expression generator may then search the mapping expression data store based on the at least one requested source mapping element and at the least one requested target mapping element and output a result of the search to the user. The result of the search may include at least one mapping expression created by a customer tenant other than the first customer tenant.

Abstract: The present disclosure involves systems, software, and computer implemented methods for efficiently authorizing parameterized query views. An example method includes parsing a received query to generate a global query parse tree. In response to determining that the query includes a parameterized query view, the parameterized query view is parsed to generate a view parse tree which is then attached to the global query parse tree. In response to determining that an object in the global query parse tree is a parameterized query view, a view parse tree portion of the global query parse tree is traversed to identify objects associated with the parameterized query view. The parameterized query view and the identified objects are authorized in a single authorization step. For objects in the global query parse tree that are not parameterized query views, the object is authorized. In response to all objects being authorized, the query is executed.

Abstract: Techniques for implementing an integrated testing tool for data replication are disclosed. In some embodiments, a software tool performs operations comprising: causing a first set of user interface elements to be displayed on a computing device; receiving, via the first set of user interface elements, a data replication configuration identifying an adapter, a source database, and a target database; storing the data replication configuration in an embedded database; causing a second set of user interface elements to be displayed on the computing device; receiving, via the second set of user interface elements, a data generation configuration identifying a table in the source database; generating random data in the table based on the data generation configuration; instructing the adapter to replicate the source data from the source database onto the target database based on the data replication configuration; and causing a log of events to be displayed on the computing device.

Abstract: Provided is a system and method for generating and updating a data model for use in retrieving data from an information retrieval system such as a database, a server, and the like. In one example, the method may include monitoring data that is written to database tables of a database by a software process, identifying links between the database tables where the monitored data is written, determining whether the software process has a pre-existing data model for retrieving data stored in the database, and in response to a determination that the software process does not include the pre-existing data model, creating a new data model for the software process which includes names of the database tables where the monitored data is written and links between the database tables, and storing the new data model via a database repository.