Abstract: Systems and methods include transmission of a first request for a first connection to a first service, usage of a first reverse proxy process to manage a first connection based on a first service configuration, change, in response to the first request, the first service configuration to a second service configuration, instantiate, in response to the change to the second service configuration, a second reverse proxy process based on the second service configuration, transmit, in response to the change to the second service configuration, a second request for a second connection to the first service an use of the second reverse proxy process to manage the second connection in response to the second request, wherein the first reverse proxy process and the second reverse proxy process execute simultaneously.

Abstract: The present disclosure involves systems, software, and computer implemented methods for automated message processing. Information associated with a failure message generated in response to process integration failure between two computer-implemented applications is received. The two computer-implemented applications include a sender application and a receiver application. The information includes a sender application/receiver application interface and details that caused the failure. Using the received information, multiple failure message similar to the failure message are identified. The identified messages were generated in response to the same process integration failure between the two computer-implemented applications. For either the sender or the receiver application, a resolution class operation executable to rectify the process integration failure is identified. The resolution class operation is simultaneously executed for all of the multiple failure messages.

Abstract: The present disclosure involves systems, software, and computer implemented methods for access control for object instances. A method includes receiving, at a cloud application, a user request associated with a user. The user request corresponds to an instance of a first application artifact type. Role assignments for the user are retrieved from a cloud platform and a determination is made that the role assignments grant permission to the first application artifact type to the user. A determination is made that a first instance-based access policy exists for the first application artifact type. A determination is made regarding whether the first instance-based access policy grants permission for the user to access the instance. The user request is serviced in response to determining that the first instance-based access policy grants permission for the user to access the instance.

Abstract: Disclosed herein are system, method, and computer program product embodiments for accessing a data service using a data service Uniform Resource Identifier (URI) object. An embodiment operates extracting a name-value pair of each parameter stored in the data service class object. The embodiment generates a parameter context URI using the one or more extracted name-value pairs according to a data service specification of the data service. The embodiment extracts one or more filter range items for each filter option stored in the data service class object. The embodiment generates a filter context URI using the one or more extracted filter range items according to the data service specification of the data service. The embodiment generates a context URI using the parameter context URI and the filter context URI. The embodiment then accesses the data service according to the context URI.

Abstract: Systems and methods include determination of a plurality of call map clusters, each call map cluster associated with a respective type of external call, two or more of a plurality of services, and a service call model modelling, for each of the two or more of the plurality of services, the issuance of outgoing service calls in response to received service calls. A bot is deployed proximate to each of the plurality of services, and each deployed bot is associated with a respective configuration to issue outgoing service calls in response to received service calls as modelled by the service call models for each of one or more services proximate to the deployed bot.

Abstract: Methods, systems, and computer-readable storage media for receiving, by a service mesh provisioned within a container orchestration system, a request from a client, determining, by the service mesh, a load balancing strategy that is to be applied for routing of the request within the heterogeneous cluster, and transmitting, by the service mesh, the request to a service within the heterogenous cluster, the service routing the request to a node for processing based on the load balancing strategy.

Abstract: Embodiments may facilitate data analytics for a cloud computing environment. A plurality of system tables may store system metadata that associates a first materialized view with a first view and a first table. A transaction compute unit may process an update request relevant to the first view. A query parser may capture the update request from the transaction compute unit and detect which system tables are associated with the update request relevant to the first view. Responsive to the request, the query processor arranges for first table data to be replicated and transmit a materialized view request to a materialized view compute unit. The materialized view compute unit may be created as a Materialized View-as-a-Service (“MVaaS”) independent of the transaction compute unit. The materialized view compute unit may receive the materialized view request, refresh the first materialized view, compute the first materialized view, and store a result of the computation.

Abstract: A method for executing a query may include generating a partition value identifier for a partitioned table. The partitioned table may include a main fragment including a main dictionary storing a first value and a main value identifier corresponding to the first value and a delta fragment including a delta dictionary storing a second value and a delta value identifier corresponding to the second value. The partition value identifier may be set based at least in part on the first value and the second value. The generated partition value identifier and a corresponding one of the main value identifier and the delta value identified may be maintained as part of a mapping. A query to group data stored in the partitioned table may be received. The query may be executed by at least using the mapping.

Abstract: A method may include receiving, at a search engine, an indication that a first data object was created. The search engine may fetch metadata associated with the first data object, the metadata including a description of the first data object and a binding expression including relational information between the first data object and at least one other data object. The search engine may add data from the at least one other data object to the first data object. The search engine may store the metadata and the first data object in an index of the search engine, the index associated with the first data object. The search engine may receive a search phrase. The search engine may generate a search result that includes the relational information retrieved from the index. Related systems and articles of manufacture, including computer program products, are also provided.

Abstract: Various examples are directed to systems and methods for configuring an application that uses a plurality of microservices. A distributed configuration deploy service (DCDS) may generate a first set of microservice configuration parameter values for a first microservice of the plurality of microservices based at least in part on a first microservice configuration model for the first microservice and at least in part on a second configuration model for a second microservice of the plurality of microservices. A configuration application programming interface (API) may determine that the first set of microservice configuration parameter values do not conflict with first live data at the first microservice. The configuration API may also lock the first microservice; apply the first set of microservice configuration parameter values to the first microservice; and release the locking of the first microservice.

Abstract: The present disclosure relates to computer-implemented methods, software, and systems for validating and revoking security tokens. A request for a resource is received at an application server and from a client. The request is associated with a security token for authenticating the client by the application server. A public key of an authentication server is acquired at the application server for authenticating requests at the application server. A signature of the security token is validated at the application server. By validating the signature of the security token, it is determined whether the security token is validly issued by the authentication server. In response to the received request, the application server determines at an identifier that is associated with the client and validates the security token based on the identifier to determine whether to serve the received request and provide the resource.

Abstract: Systems and methods are provided for executing a subset of a plurality of scripts based on traversing a decision and execution hierarchy using standard parameters and custom parameters to install and configure a new computing system for a given entity.

Abstract: Implementations include setting a session variable of each of a plurality of tenants to a first timestamp, importing, after the first timestamp, a first set of content to a shared container within a database system, during importing, each tenant in the plurality of tenants accessing pre-import data stored in the shared container based on the session variable being set to the first timestamp, and after importing the first set of content to the shared container, un-setting, at a second timestamp, the session variable of each of the plurality of tenants from the first timestamp, after the second timestamp, each tenant in the plurality of tenants accessing post-import data stored in the shared container.

Abstract: Provided are systems and methods which provide an OData messaging protocol for HTTP messages that are processed successfully but with some errors. In one example, the method may include transmitting a HTTP request to an OData service, the HTTP request comprising identifiers of one or more input fields and one or more values for the one or more input fields, receiving, from the OData service, an HTTP response indicating that the HTTP request was processed successfully with one or more errors, identifying an input field which is a target of the error and a reason for the error from a field in the HTTP response indicating that the HTTP request was processed successfully with one or more errors, and rendering, via the application, a visual identifier of the error in association with a display of the input field on the user interface.

Abstract: Methods, systems, and computer-readable storage media for receiving a first bank statement at a hybrid pipeline including a set of lookup tables and a deep learning (DL) model that can each be used to determine customer IDs from bank statements, providing a first key based on data associated with the first bank statement, and determining that the first key is included in a first lookup table of the set of lookup tables, and in response: identifying a first set of customer IDs from the first lookup table, the first set of customer IDs including one or more customer IDs, and outputting the first set of customer IDs to computer-executable software that matches the first bank statement to one or more electronic documents at least partially based on the first set of customer IDs.

Abstract: In an example embodiment, a workflow engine is introduced within a cloud landscape. Runbooks re then implemented as workflow templates within the workflow engine. The workflow engine allows for creation of workflows from the workflow templates as well as composing workflows from individual steps. The workflow engine provides a mechanism to describe workflow templates and workflow sets as code.

Abstract: The present disclosure provides techniques and solutions for enhancing or customizing the functionality of software applications, such as “apps.” More particularly, the present disclosure provides for grouping app extensions into groups, such as groups representing a particular semantic domain. A group of extensions can be applied to one or more apps. Applying extensions as a group can save development time and effort, as can the ability to apply a given extension group to multiple apps, either at the same time or over a particular time period. Further disclosed aspects assist users in implementing extensions with an extension group, such as assisting in determining where in a user interface particular extensions should appear. Once an extension group has been selected to be applied to an app, programmatic logic can cause the extensions to be automatically implemented in a computing artifact/object used by a particular extended app.

Abstract: In an example embodiment, a differentially private function is computed via secure computation. Secure computation allows multiple parties to compute a function without learning details about the data. The differentially private function is performed via probability distribution, which then permits computation of a result that is likely to be very close to the actual value without being so exact that it can be used to deduce the underlying data itself.

Abstract: Methods, systems, and computer-readable storage media for receiving, by a messaging system, a message having a key, the key indicating a tenant of a set of tenants, providing, by the messaging system, the message in a partition of a messaging queue, reading, by a service instance, the message from the partition, the service instance being in a set of services instances, each service instance executing a service of a service-based application, and in response to the message, updating, by the service instance, at least a portion of data stored within a database system, the portion of data being associated with the tenant, the database system storing data of each tenant of the set of tenants.

Abstract: Techniques and solutions are provided for maintaining data separation, such as when consolidating data for two instances of a data artifact. If data separation is not maintained, it may not be possible, or as easy, to determine from which instance particular data came, which can also limit filtering/selectively searching data for a particular instance. The present disclosure addresses this issue by providing a consolidation data artifact. For particular sets of data in the consolidation data artifact, the consolidation artifact maintains the data in association with an identifier of the instance that serves as the source of the data.