Abstract: A query may be determined based on data retrieval parameter values. The data retrieval parameter values may include a data type parameter identifying a designated data type of a plurality of data types corresponding with database observability data generated during operation of a database system. The of data retrieval parameter values may also include a designated time period during which to retrieve data associated with the designated data type. A query may be determined based on the plurality of data retrieval parameter values via a collection manager in a database application layer associated with the database system. The query may be executed to retrieve a designated dataset of database observability data corresponding with the designated data type and generated by the database system during the designated time period.

Abstract: Generating shared workspaces for enabling communications between users of different organizations and facilitating discovery of users associated with different organizations is described. A first user can generate a shared workspace and associate one or more other organizations therewith. The first user can designate first criteria associated with joining the shared workspace. The communication platform can receive a request from a second user to join the shared workspace. Based on a determination that the second user satisfies the first criteria, the communication platform can enable the second user access to the shared workspace. In some examples, an administrator associated with an organization of the second user can establish second criteria for users of the organization to join the shared workspace. In such examples, the communication platform can enable the second user access to the shared workspace based on a determination that the second user also satisfies the second criteria.

Abstract: In an example, an apparatus may include a validation module configured to identify a security policy update from a security as code repository, wherein the identified security policy update is a candidate for deployment to a production environment having a plurality of attributes defined by an infrastructure as code repository; identify, from the plurality of attributes and using the infrastructure as code repository, individual attributes that correspond to the identified security policy update, wherein the identified individual attributes are identical to a subset of the plurality of attributes; generate a test environment based on the identified individual attributes; following deployment of the identified security policy update to the test environment, check for security exceptions or availability exceptions using the test environment; and output validation results based on a result of the checking.

Abstract: The technology disclosed can query configuration management system data and includes cross table selection criteria and joined data return.

Abstract: Disclosed herein are system, method, and computer program product embodiments for automatically cataloging updated Application Programming Interface (API) specifications. The API specifications may have been previously published to an application exchange platform. An automatic cataloging tool installed at an API development system may identify an updated API specification committed to an API specification repository. To validate that a change has been made, the automatic cataloging tool may compare the updated specification, metadata, and/or referenced documentation files to an API specification previously posted to the application exchange platform. In response to determining that the API specifications differ, the automatic cataloging tool may transmit the updated API specification to the application exchange platform. The application exchange platform may then replace the previous API specification with the updated API specification for client devices to view.

Abstract: A system is disclosed. The system includes a resource monitor to monitor a resource utilization of a set of resources of one or more instances, the resource utilization corresponding to a first level of performance and cost and an instance type determiner to, based on the resource utilization, determine if there is an instance type for at least one of the one or more instances, with a resource profile, that will provide a second level of performance and cost that is closer to a default level of performance and cost than the first level of performance and cost. In addition, the system also includes an instance type recommender to, based on the determining, perform one of making and not making a recommendation to replace the instance type of the at least one of the one or more instances.

Abstract: Examples include maintaining a virtual pool of containers; receiving a request from a client for one of a plurality of services to performed; when the request includes client code, determining whether the request belongs to regular or priority queue based on two models; adding the request to an appropriate shard in the queue; getting the request from the selected one of the plurality of queues and assigning a container for the request from the virtual pool of containers, the client code to be executed in the container; and after the client code is executed in the container, deleting the container from the virtual pool.

Abstract: A computing platform may be configurable to receive a request from a video conferencing application while a video conference is in session, the request including an indication of a selection of one or more participants in a video conference session. The computing platform may also be configurable to implement a query of a database system, the query being configured to retrieve user object data, and generate a result object based, at least in part, on the retrieved one or more user data objects, the result object being configured to display information about the at least one participant. The computing platform may be configurable to provide the result object to a client device to display a graphical user interface (GUI) window including the information about the at least one participant, the GUI window comprising a user interface element to provide access to at least one function associated with a computing platform.

Abstract: Execution of client code in a shared infrastructure comprises instantiating a container manager to manage containers and routers configured to receive calls requesting execution of the client code. The container manager pre-initializes a plurality of containers and registered the containers in a database to indicate that the plurality of containers are available. A router receives a call to execute the client code and selects an available first container identified in the database. The call is routed to the selected container and the status of the container is updated to in-use to prevent another router from selecting the container. Responsive to the selected container processing the call, the router receives a response from the container and returns the response to the caller. The containers then marked for deletion in the database. The container manager then deletes any of the containers marked for deletion to prevent the containers from processing subsequent calls.

Abstract: In some embodiments, a method receives a label for a record in a database. A first operation is performed using a first value associated with the record to generate a first reporting object for a sustainability metric that is based on a resource. A second value for the first reporting object is generated based on performing the first operation using respective first values associated with first records based on a relationship in a data model to a first reporting object. The method uses the label to perform a second operation using the first value associated with the record to generate a third value for a second reporting object for the sustainability metric. The second reporting object is generated based on performing the second operation using respective first values associated with second records that are associated with the label.

Abstract: Disclosed are some implementations of systems, apparatus, methods and computer program products for implementing a polling command strategy in a database system. A subscriber transmits, to a database system, a subscription to an event. When the database system detects the event, a publisher transmits a message notifying the subscriber of the occurrence of the event. The subscriber processes the message received from the publisher. Responsive to processing the message, the subscriber waits a predefined period of time. After waiting the predefined period of time, the subscriber sends a polling message to the database system. Responsive to the polling message, the subscriber obtains data satisfying the subscription from the database system and the subscriber processes the data.

Abstract: A computer-implemented method for providing user interface functionalities is disclosed. The method includes providing a base design system layer including web browser components providing platform-agnostic user interface functionalities, an application programming interface (API) that extends the base design system layer into a second design system layer providing platform-specific user interface functionalities, inheriting and extending extensible APIs from the second design system layer, building a third design system layer using the extensible APIs, providing product-specific user interface functionalities using the third design system layer, inheriting and extending extensible APIs from the second design system layer, building a fourth design system layer using the extensible APIs, and providing presentation-specific user interface functionalities using the fourth design system layer.

Abstract: Methods, media, and systems for a changing a private channel in a channel-based communication system from an “invited-members” mode to a “whitelisted groups” mode. When in a whitelisted-groups mode, the channel administrator can whitelist one or more groups for channel membership. The whitelisted groups may be external groups managed by an identity provider. Based on the whitelisted groups, users cannot be added to the private channel without being a member of one of the whitelisted groups. Users are also automatically removed from the channel if they are no longer in one of the whitelisted groups for any reason.

Abstract: Exemplary systems, methods, and apparatuses implement efficient storage and validation of data and metadata within a blockchain using Distributed Ledger Technology (DLT) in conjunction with a cloud based computing environment.

Abstract: An agent for navigating a mobile automated system is disclosed herein. The navigation agent receives a navigation instruction and visual information for one or more observed images. The navigation agent is provided or equipped with self-awareness, which provides or supports the following abilities: identifying which direction to go or proceed by determining the part of the instruction that corresponds to the observed images (visual grounding), and identifying which part of the instruction has been completed or ongoing and which part is potentially needed for the next action selection (textual grounding). In some embodiments, the navigation agent applies regularization to ensures that the grounded instruction can correctly be used to estimate the progress made towards the navigation goal (progress monitoring).

Abstract: Managing organization disconnections from a shared resource of a communication platform is described. In a sharing approval repository of a communication platform, a shared resource can be associated with a host organization identifier and a non-host organization identifier. In an example, in response to receiving, from a user computing device associated with the host organization identifier or the non-host organization identifier, a resource disconnection request comprising a disconnecting organization identifier and a resource identifier associated with the shared resource, the sharing approval repository can be updated to add a disconnection indication for the resource identifier in association with the disconnecting organization identifier.

Abstract: Techniques are disclosed relating to filtering messages. A computer system may detect an occurrence of an event of a particular type. The computer system may determine whether to enqueue, in a message queue, a message that identifies a set of tasks to be performed in relation to the event. The determination may be based on a response received from a cache that stores a subset of filter rules of a filter rules table. Based on the response indicating a cache miss, the computer system may enqueue the message in the message queue. A process that processes the message may be operable to resolve the cache miss by 1) accessing a filter rule from the filter rules table that indicates whether messages for events of the particular type should be enqueued in the message queue and 2) updating the cache to store the filter rule.

Abstract: A recommendation service access a data matrix listing of products associated with product profiles, the data matrix having product entries that store sparse historical electronic activity. For a target product it is determined which other products should be used to boost the historical electronic activity of the target product based on a first subset of product profiles that share product characteristics with the target product. Similarity scores are computed between the product profile of the target product and the first subset of product profiles to identify a second subset of one or more products having a similarity score above a scoring threshold. The historical electronic activity of the target product is boosted using the historical electronic activity of the other products in the second subset. Association values are calculated between the target product and the other products in the second subset by based on the boosted activity.

Abstract: A header and a timestamp element for the header may be generated based on a request to process data for a page of a user interface. A tooltip with descriptive information for the timestamp element may be generated and displayed based on proximity of an interactive element to the timestamp element, and a page representation window may be displayed based on an interaction with the timestamp element. The page representation window includes a representation of the data field and its content that is indicative of how the data field and its content existed at a time of the request to process data. Moreover, an indicator of correspondence between the timestamp element and the page representation window may be displayed. Based on interaction with a settings indicator element, a header settings window for modifying settings for the header may be displayed with view options (e.g., all, custom, etc.) for data submissions.

Abstract: A method and system for message handling implemented by a first node in a distributed computing environment. The method including receiving a message including a connection identifier to identify a connection in the application layer to be utilized to send the message to a client application, parsing the connection identifier to determine a node identifier indicating a second node in the distributed computing environment that implements the connection, and forwarding the message to the second node that implements the connection by a message broker that utilizes a routing information registry to locate the second node using the node identifier, in response to the first node having a different node identifier than the node identifier of the message.

Abstract: A system is provided for object localization in image data. The system includes an object localization framework comprising a plurality of object localization processes. The system is configured to receive an image comprising unannotated image data having at least one object in the image, access a first object localization process of the plurality of object localization processes, determine first bounding box information for the image using the first object localization process, wherein the first bounding box information comprises at least one first bounding box annotating at least a first portion of the at least one object in the image, and receive first feedback regarding the first bounding box information determined by the first object localization process. The system is further configured to persist the image with the first bounding box information or access a second object localization process based on the first feedback.

Abstract: Methods and apparatus for mediating user access to services over a network are described. Access is provided by a service network host to a plurality of connectors providing access to a plurality of services over the network. The services are provided by entities independent from the service network host. The connectors including a first connector are configured to communicate with a first service using a first format to retrieve or modify data associated with the first service. The first connector is further configured to identify one or more methods or data fields of the first service. The service network host is further configured to provide, to a computer associated with a user over the network, one or more directions for using the first connector to display and/or modify data from the first service over the network.

Abstract: A cloud infrastructure is configured and deployed for managing services executed on a cloud platform. The cloud infrastructure includes a control datacenter configured to communicate with one or more service datacenters. The service datacenter deploys one or more application programming interfaces (API's) associated with a service. The service datacenter also deploys an administration agent. The control datacenter hosts an engine that receives requests from users to perform administration operations by invoking the administration API's. In this manner, the control datacenter functions as a centralized control mechanism that effectively distributes administration operation requests as they are received from users to service datacenters that can service the requests. The cloud infrastructure provides an auditable, compliant and secure management system for administering services for distributed systems running in the cloud.

Abstract: Systems and methods for verifying a firewall for a cloud provider. The method includes receiving by a timelord module configured with access to a plurality of HTTP attacks that incorporate random tokens, an updated policy ok signal that was generated by an external element. The timelord module responds by (a) loading a first HTTP attack with a first expected response that is either forbidden or accepted, the first HTTP attack including the random tokens in a form of a header key value parameter; (b) sending the first HTTP attack to the firewall; (c) comparing a response from the firewall to the first HTTP attack with the first expected response; and (d) incrementing the first HTTP attack and repeating (a)-(c) until the plurality of HTTP attacks has been sent; and deleting the random tokens after the plurality of HTTP attacks have been sent.

Abstract: Techniques for facilitating a digital signature occurrence associated with an object transmitted via a communication channel associated with a group-based communication platform. The object may be created by a user within either the group-based communication platform or a third-party application and transmitted to one or more other users associated with the communication channel via the group-based communication platform. The group-based communication platform may be configured to authenticate a digital signature and, based on a verification of the authenticity, associate the digital signature with the object. The group-based communication platform may cause the digital signature to be presented via an interface associated with the communication channel, such as proximate to or viewable in association with the object.

Abstract: A system can allow collaboration between two or more tenants in a multi-tenant system. Each tenant can share a common access to a processing space and a data storage device. Each tenant can be assigned to a virtual environment having a dedicated portion of the data storage device. The system can create a database record in a first dedicated portion assigned to the first tenant. The database record can be displayed on a user interface of the first tenant and include a collaboration tool component embedded within the database record. The database record can be transmitted to a database and transmitted from the database to a second dedicated portion of the data storage device. The second dedicated portion can be assigned to a second tenant of the multi-tenant system.

Abstract: Techniques for clustering a plurality of virtual space servers based on communication platform data are discussed herein. In some examples, a user may post a message to a virtual space of a communication platform. The communication platform may transmit the message to virtual space servers configured to manage the virtual space within which the message originated. In such examples, the communication platform may identify clusters of virtual space servers and determine within which cluster the corresponding virtual space server is located. Virtual space servers may be clustered based on attribute data associated with communication platform data. In some examples, the communication platform may send the message to the virtual space server which may send the message to subscribing gateway servers. Further, the gateways servers may send the message to the recipient client devices. The recipient client devices may display the message via a user interface of the communication platform.

Abstract: A native user interface (UI) application of a mobile device includes a library of different components such as text, forms, tables, lists, maps, views and buttons. The components can also have associated actions in some cases. When a view of the UI is launched, the mobile device contacts a server or other data source to obtain metadata associated with the view. The metadata can be tailored to a user or organization of the mobile device. The metadata selects specific components and defines a layout for the components. The mobile device uses the metadata to retrieve the components and render them in the view. The views can be changed by changing the metadata without changing the native application.

Abstract: Database systems and methods are provided for automatically generating records at a database system in a configurable and customizable manner. One method involves using a key value associated with a configuration to identify related records at a database system associated with the key value and identify configuration metadata associated with the configuration at the database system. The method continues by providing a graphical user interface (GUI) display at a client device coupled to the database system over a network, where the GUI display includes a first region including a first subset of the records grouped into a first group based on the configuration metadata and a first common field value and a second region including a second subset of the records grouped into a second group based on the configuration metadata and a second common field value.

Abstract: Systems, devices, and techniques are disclosed for database inventory isolation. Demand levels for access to items may be monitored. The items may have associated inventory counts in a database. An item of the items for which to isolate the inventory count associated with the item may be determined based on the demand levels. The inventory count associated with the determined item may be isolated by moving the inventory count associated with the determined item from a first data block that stores the inventory count associated with the determined item and inventory counts associated with others of the items to a second data block that does not store any other inventory counts.

Abstract: Disclosed are examples of systems, apparatus, methods and computer program products for sharing and publishing files. In one aspect, the database system can maintain a user database, a file database and a library. The database system can receive a first request initiated by a first user to share a first file with one or more second users and, responsive to the first request, enable a second set of one or more permissions for each of the second users. The database system also can receive a second request initiated by the first user to publish the first file to the library and, responsive to the second request, publish the first file to the library. The database system additionally can restrict access to the published file based on permissions associated with the library.

Abstract: A computer-implemented method of providing targeted content to a user includes generating a query index from a data corpus, the query index including a plurality of market segment-based queries, wherein each market segment-based query of the plurality of queries is configured to provide targeted content on a browser user interface of a user determined to be within a corresponding market segment.

Abstract: Database systems and methods are provided for managing related records using a tiered hierarchical arrangement that supports asynchronous and independent events with respect to related records. A method involves automatically generating a child record having a field value based on configuration data associated with a parent record, automatically updating a second field value for a summarization field associated with the parent record in response to automatically generating the child record, and after automatically updating the second field value, identifying a group record that is a parent of the parent record based on a second field of the parent record, automatically updating a third value for a second summarization field associated with the group record based at least in part on the second field value, and providing a graphical representation of the group record including a graphical representation of the third value for the second summarization field.

Abstract: Techniques are provided for thwarting attackers in a computing system which uses network management interfaces (NMIs). Before submitting NMI form data, a user computing device queries a server using a user id to obtain a signature which defines a shuffling map and random data such as a random key. The NMI form data is divided into portions and the random data is appended to each portion to provide respective data units, or buckets of data. The data units are then shuffled according to the shuffling map before being transmitted to a server, with the signature or an identifier of the signature included in a header. At the server, the data units are unshuffled to recover the data units, and the random data is removed to recover the form data portions. The instructions of the form data can then be executed.

Abstract: Embodiments herein relate to prediction, based on previous usage of a cloud-based computing resource by a user of one or more users of the cloud-based computing resource, future usage of the cloud-based computing resource. Based on the predicted future usage, embodiments relate to identifying that throttling of access to the cloud-based computing resource is to occur, and notifying the user of the throttling. Other embodiments may be described and/or claimed.

Abstract: The technology disclosed relates to a platform for ultra-fast, ad-hoc data exploration and faceted navigation on integrated, heterogeneous data sets. The disclosed method of declarative specification of visualization queries, display formats and bindings represents queries, widgets and bindings combined on a dashboard in real time, with flexible display options for analyzing data and conveying analysis results.

Abstract: Activation policies for workflows are described. Some implementations support receiving a definition of a workflow, including data defining an input set for the workflow and data defining activities and a flow of the activities for the workflow. The data includes an activation policy for at least a particular activity of the activities. An estimated operational outcome for the workflow and/or each of the activities is determined and displayed. Then data identifying edits to the activation policy are received, and an updated version of the estimated operational outcome for the workflow and/or each of the activities is determined and displayed.

Abstract: Described herein are a system, apparatus, device, method, and/or computer program product embodiments and/or combinations and sub-combinations thereof for managing alerts and subscriptions in a cloud collaborative system. In one embodiment, a modification notice identifying a change to a field of a record is obtained, and the change is compared with a criterion specified in a subscription for a user. If the change satisfies the criterion, an alert is generated based on the modification notice. An alert GUI is transmitted to a user device to display alerts for the user. The user may access an expanded view of the record through the alert in the alert GUI. The user may also publish the alert to a chat session involving other users of the cloud collaborative system.

Abstract: A request may be received to transfer from a first entity to a second entity a right related to a digital asset stored in an on-demand database system. The on-demand database system may provide computing services to a plurality of entities via the internet. A token associated with the digital asset may be identified. The token may being included in a smart contract recorded within a distributed trust ledger and may be owned by a first distributed trust ledger account. The smart contract may be executed within the distributed trust ledger to record a transfer of the token from the first distributed trust ledger account to a second distributed trust ledger account. The on-demand database system may be updated to include one or more database entries reflecting the recorded transfer.

Abstract: Techniques are disclosed relating to determining a similarity of components of a current webpage to different UI components for use in automatically generating an updated webpage. A computer system may receive information specifying a current webpage, including a particular current UI component and information specifying a plurality of different UI components for an updated webpage. The computer system may identify one or more characteristics of the particular current UI component. The computer system may determine, based on the identified one or more characteristics, a similarity of ones of the plurality of different UI components to the particular current UI component. The computer system may select, based on the determining, a particular different UI component from the plurality of different UI components for use, in the updated webpage, for the particular current UI component. Such techniques may advantageously improve user experience by automatically providing up-to-date user interfaces.

Abstract: A method and system of authenticating a user logon builds a user logon profile with a plurality of user logon features gathered during at least one successful attempted user logon, determines a logon feature novelty score for each feature, receives a user logon request for authentication and extracts current user logon features, retrieves corresponding logon feature novelty scores, determines a first distance function score for the corresponding logon feature novelty scores of the current user logon features, builds a failed logon attempt database, determines a failed logon feature novelty score, extracts the failed logon feature novelty scores corresponding to current user logon features, determines a second distance function score for the corresponding failed logon feature novelty scores of the current user logon features, and determining to one of allow or deny the user logon request based on at least one of the first distance function score and the second distance function score.

Abstract: System and methods are described for receiving a request from a client application to obtain data from a server; collecting a list of tasks to be performed by the server to process the request to obtain the data; performing tasks from the list of tasks by the server until an elapsed time to perform the list of tasks exceeds a first threshold and a size of a payload storing the data exceeds a second threshold; preparing the payload; and sending the payload to the client application.

Abstract: A method and system to manage application package installation in a multi-tenant system is provided. The method includes accessing metadata of an application package for distribution in the multi-tenant system, selecting a component of the application package with a permission guard in the metadata, evaluating permission guard logic to determine wither a target tenant in the multi-tenant system can install the component, and compiling and installing the component in response to the permission guard logic indicating the tenant of the multi-tenant system has met conditions to utilize the component.

Abstract: Disclosed are some implementations associated with a flow builder application including a graphical representation of a flow. Performance data associated with the flow can be obtained. A set of metrics associated with the flow can be generated or updated based, at least in part, on the performance data. The set of metrics can include one or more metrics collected across one or more flow runs. At least a portion of the set of metrics can be provided for presentation within the flow builder application in relation to one or more elements of the flow. The portion of the set of metrics can indicate a performance condition including a duration of the one or more elements of the flow. A request to edit the flow based on the performance condition can be processed, and the graphical representation of the flow can be modified.

Abstract: Techniques are disclosed relating to managing data objects. A computer system may access a first application comprising a set of functions and may execute a second application to facilitate execution of the first application. The first application may be written in a different programming language than the second application. The second application may manage, on behalf of the first application, memory resources of data objects that are defined within ones of the set of functions of the first application. The second application may establish, for the data objects, ownership information that indicates which ones of the functions are utilizing the data objects. The ownership information may be usable to determine, upon completion of a function of the set of functions, whether a given one of the data objects can be deallocated based on whether the given data object is being utilized by another function.

Abstract: Direct access to embedded links via an authenticated application is described. In an example, a first user interface can be presented via a web browser of a computing device, wherein the first user interface includes an actuation mechanism corresponding to an object associated with a platform, and wherein the computing device is associated with an application associated with the platform. In at least one example, an indication of an interaction with the actuation mechanism can be received and based at least in part on (i) receiving the indication of the interaction with the actuation mechanism and (ii) a determination that the application is associated with an active authentication session, the object can be presented via a second user interface presented via the application. As such, direct access to the object can be provided via the authenticated application.

Abstract: A method that includes receiving a request to generate a data package for deployment in a target database environment. The request may indicate a first set of data objects from a first configuration associated with a source database environment. The method may further include determining a second set of data objects that are related to the first set of data objects based on the request and on a mapping between the first set of data objects and the second set of data objects. The method may further include transmitting an indication of the second set of data objects to a user at a user interface. The method may further include receiving a selection of one or more data objects from the second set of data objects for inclusion in the data package. The method may further include generating the data package based on the selection.