Abstract: Technologies are described for facilitating transaction processing in a distributed database environment. A database client sends database operations to a slave node, which mediates execution of the transaction. A connection between the database client and the slave node is associated with an identifier, and the transaction has an identifier. The database client sends a commit request to a master node over a network connection between the master node and the database client. The commit request includes the transaction identifier. The commit request can also include an indication of database nodes executing operations in the transaction.

Abstract: In an example embodiment, a first function is performed on the first document received at first middleware management architecture, causing a change in the status of the first document. The change is logged in a record corresponding to the first document in a memory. Then the first document is sent to a second network via a transmission protocol layer. A notification of a change in the status of the first document within the second layer is received in a layer other than the transmission protocol layer, from the second network. The change in the second network is logged in the record corresponding to the first document in the memory. Information corresponding to the change in the status of the first document at the middleware management architecture and the change in the status of the first document in the second network is reported to the first network.

Abstract: Embodiments of the present disclosure pertain to accessing computing resources. In one embodiment, the present disclosure includes a computer implemented method comprising storing at least one credential for accessing a first system, storing a plurality of user credentials for a plurality of users having access to a second system, linking the plurality of user credentials for the plurality of users having access to the second system to the at least one credential for accessing the first system, receiving a first user credential for a first user from the second system over a first connection, authenticating the first user credential, wherein the first user credential is authenticated when the first user credential matches one of the stored plurality of user credentials, and establishing a second connection between the first system and the second system using the at least one credential when the first user credential is authenticated.

Abstract: Various examples are directed to systems and methods for implementing a web-based information system. A web application system may access a web application document that comprises object data, user interface data, and rule data. The web application system may serve the first user interface page to a first instance of a web application executing at a first user computing device, the first user interface page including first data object attributes of the first data object. The web application system may receive, through the first user interface page, a change to the first data object. The web application system may determine that the rule data describes a first action to be executed in response to the change to the first data object and execute the first action.

Abstract: Systems and methods are provided for receiving, from a computing device, a selection of a template for a custom microservice and configuration parameters for the custom microservice, generating the template for the custom microservice using the configuration parameters, the template for the custom microservice comprising defined interfaces for accessing core microservices, defined integration points for integration with a system providing the core microservices, and stubs for custom components for the custom microservice, and providing the template for the custom microservice to the computing device, wherein custom components for the custom microservice are added to the template via the computing device using the stubs for the custom components. The systems and methods further provide for registering the custom microservice to be exposed to and accessed by a tenant with authorization to access the custom microservice along with the core microservices.

Abstract: A system includes reception of a user selection of at least two dimensions of a data source, acquisition of data of the data source, the data associating each of a plurality of dimension values of a first dimension of the selected dimensions with one or more of dimension values of a second dimension of the selected dimensions, determination, based on the acquired data, of graph nodes representing dimension values of the first dimension and graph edges connecting the graph nodes and representing dimension values of the second dimension, generation of a graph image comprising the graph nodes and graph edges, and transmission of the graph image to the user.

Abstract: Example embodiments for evaluating programmable conditions applicable to an operation are described. In an example embodiment, a request to evaluate one or more programmable conditions applicable to an operation is received. The request includes data associated with the operation. One or more objects representing the one or more programmable conditions are retrieved from a database. The one or more objects include executable code for determining compliance of the operation with the one or more programmable conditions. At least a portion of the executable code is executed based on the data associated with the operation. An output of the executable code is returned to a computing system issuing the request. The output includes an indication as to whether the operation complies with the one or more programmable conditions.

Abstract: Methods, systems, and computer-readable storage media for selective segmentation of Internet-of-Things (IoT) data in data analytics systems. Implementations can include receiving IoT data from an IoT device, determining that segmentation is to be applied to the IoT data, determining a segment start and a segment end for a segment based on one of a property represented in the IoT data and a property value represented in the IoT data, and providing a table that records the segment independently of the IoT data.

Abstract: Database revalidation may be provided by parallelized execution of distance-based groups. A change to a first data object of the plurality of data objects is received. The first data object has a plurality of dependent data objects in the plurality of data objects. A maximum dependency distance for the respective dependent data objects in the plurality of dependent data objects is calculated. The respective dependent data objects in the plurality of dependent data objects are grouped into one or more groups based on their respective maximum dependency distance. A given group of the one or more groups represents a given maximum dependency distance. The one or more groups are executed on in order from smallest to largest of their respective representations of maximum dependency distance. Executing on the one or more groups includes revalidating the data objects of a respective group in parallel.

Abstract: An identifying data set is defined including semi-identifying attributes with semi-identifying attribute values corresponding to an entity. Descriptive records corresponding to the semi-identifying attributes are created. Based on the descriptive records, retention records with retention attributes are created. A composed retention attribute is generated based on applying cryptographic hash algorithms to the retention attributes stored in a database. A retention attribute description is generated with a category and payload corresponding to the composed retention attribute. The semi-identifying attributes with corresponding positions are stored in the retention attribute. Hashes corresponding to the retention attributes are computed based on a composing mechanism that includes logic to compute the hashes. The hashes are combined to generate the composed retention attribute. When a request is received to permanently delete the entity from the database, the entity may be permanently deleted from the database.

Abstract: Embodiments allow comparison of key figures (e.g., costs, lead times) between different entities in a privacy-preserving manner, utilizing secure multi-party computation (MPC) approaches implemented by a central service provider. The central service provider receives encrypted key figure data from each of multiple players in a peer group. In one embodiment the central service provider executes a secure computation protocol comprising a semi-homomorphic encryption scheme exhibiting an additive homomorphic property. The central service provider returns to each player, a statistical measure (e.g., top quartile, bottom quartile) allowing comparison with the other players' key figures while preserving privacy. Alternative embodiments may return to the players, a statistical measure calculated from a Boolean or arithmetic circuit implemented at the central server using other secure computation approaches (e.g., garbled circuits, secret sharing, or (semi or fully) homomorphic encryption.

Abstract: A method, a system, and a computer program product for executing a database compression. A compressed string dictionary having a block size and a front coding bucket size is generated from a dataset. Front coding is applied to one or more buckets of strings in the dictionary having the front coding bucket size to generate one or more front coded buckets of strings. One or more portions of the generated front coded buckets of strings are concatenated to form one or more blocks having the block size. Each block is compressed. A set of compressed blocks is stored. The set of the compressed blocks stores all strings in the dataset.

Abstract: A system and method providing a single entry point for implementing software extensions across multiple different software applications. In one embodiment, the method may include retrieving an indication of an extension point offered by a cloud application, the extension point being defined by a signature including a name and one or more parameters; generating one or more extension point implementations of the extension point by configuring custom code that fulfills the signature of the extension point; and sending, to the cloud application, an indication the extension point is active for requesting an execution of the one or more extension point implementations to be executed apart from the cloud application.

Abstract: Systems and methods for providing a database having a plurality of standard configuration settings are presented. Requests corresponding to modifications to some or all of the standard configuration settings are monitored during customization of the database. A determination of whether the modifications are allowed is made. Based on the determination, a message comprising allowance or denial for each of the modifications is generated. Data characterizing allowed modifications is logged. The logged data is used to update the database when the standard configuration settings of the database change as part of a database upgrade. Data characterizing the allowed modifications is extracted from the logged data and used to generate differences between a newer version of the database and an older version of the database.

Abstract: Simulated software conversion offers advance warning of possible issues that may arise during a full conversion process. An engine interposed between a planner and an upgrade module interacts with the planner and an upgrade module to simulate compliance checks, and to reference a data model to simulate conversion tasks (e.g., simplification items, add-ons, custom code). The engine instructs the planner to continue (rather than halt/suspend) iterative interrogation of the existing production landscape to create an un-truncated stack.xml file, even when the planner encounters an unknown/unfamiliar software element. The upgrade module expects an incoming modified stack.xml file as input, that modified stack.xml file including additional information (such as a flag) referenced by the upgrade module to perform conversion compliance checks and other conversion tasks. The engine enriches the full stack.xml file received from the planner, creating the modified stack.

Abstract: Systems and methods for applying k-anonymity to data from a database are provided. An initial extraction of data from a database is performed. Initial anonymized data is produced based on the extracted data and a configuration of quasi-identifiers. An actual k-anonymity level is calculated based on the initial anonymized data. The actual k-anonymity level is compared to a desired k-anonymity level. The configuration of quasi-identifiers is adjusted based on the comparison. The calculating, comparing, and adjusting are iteratively repeated until the actual k-anonymity level equals the desired k-anonymity level or the adjusted configuration of quasi-identifiers has reached a limit. Final anonymized data is produced based on the adjusted configuration of quasi-identifiers. A subsequent extraction of data from the database is performed. Subsequent anonymized data is produced based on the extracted subsequent data and the adjusted configuration of quasi-identifiers.

Abstract: Some embodiments may be associated with a cloud computing environment. A cloud resource credential management system may be provisioned as part of a virtual machine deployment, access information associated with an application or a service configuration file and establish a cloud resource credential provisioning system external to an application to be executed in connection with the virtual machine. The cloud resource credential provisioning system may, for example, map a cloud resource policy and a cloud resource credential. The cloud resource credential provisioning system may then intercept a cloud resource call from the application to a cloud resource provider and validate that the cloud call request complies with the cloud resource policy. If the cloud resource call complies with the cloud resource policy, the cloud resource credential provisioning system may extend the cloud resource call with the cloud resource credential and forward the extended cloud resource call to the cloud resource provider.

Abstract: A system, method, and computer-readable medium, to access an On-line Transaction Processing (OLTP) data source, the OLTP data source including a plurality of tables; extend the OLTP data source by adding at least one new attribute to at least one of the plurality of tables; define at least one calculated property for at least one of the plurality of tables, the at least one calculated property to be calculated during a runtime analysis of the OLTP data source having the at least one new attribute and the defined calculated property; and persist the OLTP data source having the at least one new attribute and the defined calculated property in a memory.

Abstract: A method, a system, and a computer program product for performing analysis of object dependencies. A first base object is selected from a plurality of base objects. At least one first dependent object in a plurality of dependent objects depends on the selected first base object. A group of base objects that includes the selected first base object is generated. A second base object in the plurality of base objects is determined. The first dependent object is dependent on the second base object. The determined second base object is grouped with the generated group of base objects. At least one second dependent object in the plurality of dependent objects and its corresponding base object are determined. The corresponding base object is grouped with the generated group of base objects. The generated group of base objects is stored.

Abstract: A disaster recovery data store may contain an operator-defined parallel account failover value. A disaster recovery service platform may establish a primary region as an active region and determine that a potential disaster has occurred in connection with the primary region. A warm-up process may be initiated causing a pool of virtual machines to begin execution at a secondary region. The platform may then determine that an actual disaster has occurred in connection with the primary region and simultaneously execute disaster recovery failover procedures from the primary region to the secondary region for multiple accounts in parallel based on the operator-defined parallel account failover value. Before all failover procedures are complete, the platform may transmit at least one intermediate failover report. After all failover procedures are complete, the platform may transmit a final failover report and establish the secondary region as the active region using the pool of virtual machines.