Abstract: A method and system for certificate management for services in a container orchestrator. The method includes requesting a certificate for a service from a cloud certificate manager, in response to detecting a request from a control plane of the container orchestrator for the certificate for the service, receiving the certificate from the cloud certificate manager, storing the certificate in a secret storage, and returning the location of the secret storage to a requester of the certificate.

Abstract: An abstract data graph may be constructed at a server. The abstract data graph may include nodes and links between nodes and may represent computer programming instructions for generating a graphical user interface at a client machine. At least some of the links may represent dependency relationships between portions of the graphical user interface. The abstract data graph may be resolved at the client machine to identify data items, which may be retrieved from the server and used to render the graphical user interface.

Abstract: Systems, methods, and computer-readable media are provided for data catalogs, metadata repositories, data discovery, and data governance, and in particular, for a canonical model-driven active metadata exchange for distributed data catalogues. Disclosed implementations include an application independent metadata repository with a Canonical Data Model (CDM). The CDM maintains a single set of use case agnostic mappings between data sources and the CDM. The physical mappings of a particular entity in the CDM are used to determine the different applications that are mapped to it and what objects or data structures that are exposed by that particular data source. Other embodiments may be described and/or claimed.

Abstract: An abstract data graph may be constructed at a server. The abstract data graph may include nodes and links between nodes and may represent computer programming instructions for generating a graphical user interface at a client machine. At least some of the links may represent dependency relationships between portions of the graphical user interface. The abstract data graph may be resolved at the client machine to identify data items, which may be retrieved from the server and used to render the graphical user interface.

Abstract: Described herein are systems, apparatus, methods and computer program products configured to detect bends within a flexible display and utilize the flexible display to provide a plurality of viewports. A geometry identifier may be electrically coupled to the flexible display and allow for determination of bends of the flexible display and for segregating the display into a plurality of viewport based on the bends.

Abstract: Database systems and methods are provided for authorizing access to a protected resource. One method involves an authorization service automatically assigning a unique alias to a web application and thereafter receiving a request for access to a protected resource on behalf of a user of the web application. In response to the request, the authorization service generates a graphical user interface (GUI) display including a graphical representation of the unique alias automatically assigned to the web application at a client device associated with the user, and thereafter in response to user selection of a GUI element of the GUI display to authorize access, the authorization service obtains an access token associated with the user and the protected resource and transmits the access token to the web application.

Abstract: A request may be received to evacuate data from a database system associated with a designated computing pod that provides on-demand computing services to a plurality of entities via the internet. The data may include portions that each correspond with a respective one or more of the on-demand computing services. Data succession policies associated with the data may be identified, where each data succession policy corresponds with one of the data portions and identifies one or more constraints associated with evacuating the data portion. The data portions may be transmitted to recipient computing pods in accordance with the data succession policies, and removed from the database system.

Abstract: A computer implemented masking manager provides a method for access controls. The method includes receiving a request for an object in a database, retrieving the object from the database, applying masking rules to a field of the object to determine whether the requestor has access to the field, determining a replacement value for the field based on requestor access to the field, and returning the object to the requestor with the replacement value in the field of the object.

Abstract: A method and apparatus for generating personalized suggestions for natural language search queries, where the method includes receiving a natural language query input from a user, obtaining set of suggestions for the natural language query, identifying a set of concepts in the set of suggestions, applying co-occurrence model to the set of concepts to obtain user specific concept probabilities and vocabulary probabilities, computing suggestion scores for at least one suggestion in the set of suggestions based on the user specific concept probabilities and vocabulary probabilities, and ranking the set of suggestions based on suggestion scores.

Abstract: A method and apparatus for performing a bypass block navigational function to a user interface including generating, by a processor, a webpage including a bypass block navigation attribute associated with a first portion of the webpage, receiving, at a network interface a request for the webpage from the user interface, transmitting, by the network interface, the webpage and a software module including an instruction associated with the bypass block navigation function in response to the request, causing display, at the user interface, the webpage at a starting location, receiving, from the user interface, a keystroke associated with the bypass block navigation function, and causing display, at the user interface, of the first portion of the webpage in response to the instruction associated with the bypass block navigation function.

Abstract: A method for replicating a set of parent resources from an administrator namespace to a set of tenant namespaces is described. The method includes receiving, by the administrator namespace, a global object that includes a set of object fields that reference (1) a set of parent resources and (2) the set of tenant namespaces; monitoring, by an operator controller of the administrator namespace, the global object to determine whether a change has been made to the global object; and replicating, by the operator controller, the set of parent resources to the set of tenant namespaces as child resources based on the global object in response to detecting a change to the global object.

Abstract: Systems, methods, and devices enable the display of native and web components of application. Devices are capable of identifying at least one native component and a plurality of web components that includes a first web component and a second web component, wherein the at least one native component and the plurality of web components are configured to be displayed on a user interface screen. Devices are also capable of generating an image of the first web component and an image of the second web component, displaying the at least one native component at a location on the user interface screen that is between the image of the first web component and the image of the second web component.

Abstract: Described herein are systems, apparatus, methods and computer program products configured for componentized dashboards for data visualization. In certain embodiments, a component may be configured to be integrated within a dashboard. The component may receive data from one or more user database and provide one or more representations of the data. The component may be integrated within the dashboard as a separate component. That is, the component may provide the plurality of representations independent of the dashboard. The component may be maintained independent of the dashboard and, thus, may be updated independent of the dashboard.

Abstract: Provided herein are system, methods and computer program products for using a bot server for initiating and controlling bot instances, specifically conversation bot instances at client devices for interacting with users associated with the client devices. The bot server may communicate with a remote cloud service providing bot services for initiating and operating the bot instances to retrieve logic metadata used to control the bot instances and may use this metadata to initiate and control one or more bot instances at the client devices to interact with the associated users. In particular, the bot server may be deployed at a network edge in close network proximity to the client devices.

Abstract: To deliver up-to-date, coherent user data to applications upon request, the disclosed technology includes systems and methods for caching data and metadata after it has been synchronously loaded—for future retrieval with a page load time close to zero milliseconds. To provide this experience, data needs to be stored as locally to a user as possible, in the cache on the local device or in an edge cache located geographically nearby, for use in responding to requests. Applications which maintain caches of API results can be notified of their invalidation, and can detect the invalidation, propagate the invalidation to any further client tiers with the appropriate derivative type mapping, and refresh their cached values so that clients need not synchronously make the API requests again—ensuring that the client has access to the most up-to-date copy of data as inexpensively as possible in terms of bandwidth and latency.

Abstract: According to some implementations, a data policy compliance service causes the display of a dashboard, wherein the dashboard identifies a first geographic region in which there is a datacenter hosting an organization instance of a customer of a cloud-based software provider. Responsive to user interaction, the data policy compliance service causes the display of the dashboard to reflect information regarding a possible migration of the organization instance from the first geographic region to a second geographic region of the plurality of geographic regions. The information includes a set of one or more compliance assessment metrics reflecting a level of compliance of the organization instance with data privacy and/or data security laws, regulations, and/or policy.

Abstract: According to some implementations, compliance assessment metrics in a subset of two or more compliance assessment metrics are combined to form a combined compliance assessment metric. Each compliance assessment metric in the subset reflects a level of compliance of a set of rules with a different type of data privacy and/or data security laws, regulations, and/or policy. The set of rules are to manage personal data in an organization instance of a customer of a cloud-based software provider capable of hosting the organization instance in one or more datacenters in a plurality of different geographic regions. In addition, a dashboard, which is part of a data policy compliance service provided by the cloud-based software provider, is caused to be displayed and includes at least the combined compliance assessment metric.

Abstract: Disclosed herein are system, method, and computer program product embodiments for facilitating access to and incorporation of APIs within an application during development, while ensuring that the API satisfies quality constraints. These quality constraints are controlled by the application of rules, which result in a maturity score for the API, in accordance with embodiments. These rules may be provided by a variety of sources for use in scoring the API at various stages. For example, a developer group may control access to developers within the group by applying a ruleset that restricts APIs for applications written by the developer group to a threshold score. This threshold score can limit or restrict APIs that are offered to a developer by an API exchange. Additionally, a ruleset may be applied to enforce a minimum score for submission of an API for inclusion within an API exchange.

Abstract: Architectures and techniques to control heterogeneous teams of robots. Input is received from a remote device with a control platform. The control platform provides a control mechanism for a team of heterogenous robots having at least two different control structures. Control signals are generated for at least two different types of robots communicatively coupled with the control platform. A first type of robot is independent of a second type of robot and the first and second type of robot have different control mechanisms. The first type of robot receives a request for an item to be delivered. At least one of the first type of robot operates to identify the item and to move the item to an intermediate location and to generate a request to at least one of the second type of robot. At least one of the second type of robot operates to move the item from the intermediate location to a new location.

Abstract: Some embodiments of the current disclosure disclose methods and systems for batch active learning using the Shapley values of data points. In some embodiments, Shapley values of a first subset of labeled data are used to measure the contributions of the first subset of data to the performance of neural network. Further, a regression model that correlates the first subset of data to their Shapley values is trained to predict the Shapley values of a second subset of data that are unlabeled. A portion of the second subset of data may then be selected for labeling based on the predicted Shapley values.

Abstract: A user interface may be caused to be displayed on a device of a user. The user interface may be configured to allow the user to create an application or web page. Instructions to configure a choice component of the application or web page may be received. The choice component may have a data source associated with one or more database objects of the database system and the choice component may have a display type defining how the choice component is displayable to users of the computing platform. The data source and the display type may be selectable by the user via the user interface. The choice component may be created or modified based on the instructions. The choice component may be published to a storage medium for transmission upon request to client devices accessing the application or web page.

Abstract: The present disclosure is directed to integrating mobile application plug-ins. For example, a method may include: at run-time of a host application, initializing, by the host application, a plurality of plug-ins; in response to initializing the plurality of plug-ins, establishing a set of supported services provided between a plurality of components comprising a native component of the host application and the plurality of plug-ins; detecting a request for a service from a first component of the plurality of components; and in response to determining that the requested service is one of the supported services, routing the requested service to a second component of the plurality of components, the second component being different than the first component.

Abstract: The present disclosure is directed to dynamically routing an event to a component of a hybrid application. For example, a method may include: detecting an event from a first component of a first component type of a hybrid application; transmitting a request to execute a function associated with the event to a plurality of components, the plurality of components being a combination of components of the first component type and components of a second component type different from the first component type, the first component being different from the plurality of components; dynamically determining which component of the plurality of components to assign to execute the function, the dynamically determining being based on which components of the plurality of components are available to execute the function and one or more rules; assigning the function to the determined component; and receiving a result of the function from the determined component.

Abstract: A method for managing features for a search system using declarative metadata. The method includes receiving search metadata including declarative statements identifying at least one search feature to be enabled across a plurality of components of the search system, performing functional verification of the at least one search feature, testing the at least one search feature, and enabling the at least one search feature in at least one of the plurality of components of the search system in response to positive functional verification and positive testing.

Abstract: Disclosed herein are system, method, and computer program product embodiments for creating an enterprise data model that defines entities and relationships between the entities spanning multiple environments and for deploying and maintaining artifacts across the environments using metadata specified in the enterprise data model. By embedding metadata that describes foreign key references within an enterprise data model, a unifying enterprise data model may manage artifacts across multiple domains while implementing a physical, cross-domain, data architecture. Such an enterprise data model may provide an organization with a 360-degree view of the information harnessed across the organization's technical landscape and may allow the organization to easily rollout a comprehensive data warehousing solution.

Abstract: Methods, and apparatuses are provided for access limitations to a network in a session using a formatted web token. The method includes: formatting a web token by a schema to create a formatted web token for user access to the network; receiving a log-in request for the user access to the network server via an app hosted by a computing device remotely located to the network server; in response to receipt of a user access request, creating the session by the network server with network limitations for user access to data and resources of the network; passing the formatted web token to a client for enabling user access to the data and resources of the network; decoding payload data of the formatted web token at the client to authenticate the user access; and enabling the client with access limitations based on decoded payload data.

Abstract: A multi-master replication system is disclosed. The multi-master replication system allows a large set of peer instances to collaboratively replicate data to each other. According to an example, a change detection thread running on a first server associated with a first instance of multiple instances of a replicated database monitors for changes to any of multiple records within one or more shared tables of the replicated database. Responsive to detection of a change to a record, an item is stored by the change detection thread onto a queue containing information regarding the change. Groups of changes are packaged into multiple chunks, in which each chunk (i) corresponds to a discrete unit of progress for both change detection and transport; (ii) is associated with multiple changed records; (iii) contains metadata about the multiple changed records; and (iv) does not contain data from the one or more shared tables.

Abstract: A method, a system, and a non-transitory computer readable medium (CRM) for controlling access to an online presentation are disclosed. At least one embodiment includes granting a controller status to a first user for a first slide during the online presentation. Then operating the online presentation based on a set of slide commands from the first user having the controller status. The at least one embodiment also includes determining a second user is to have the controller status for a second slide during the online presentation, and transferring the controller status from the first user to the second user for the second slide during the online presentation.

Abstract: A method and system to manage application package installation in a multi-tenant system is provided. The method includes accessing metadata of an application package for distribution in the multi-tenant system, selecting a component of the application package with a permission guard in the metadata, evaluating permission guard logic to determine wither a target tenant in the multi-tenant system can install the component, and compiling and installing the component in response to the permission guard logic indicating the tenant of the multi-tenant system has met conditions to utilize the component.

Abstract: Disclosed herein are system, method, and computer program product embodiments for generating and operating workbooks. One embodiment operates by causing display of a workbook having: a first page including a preview of a first object generated by a first online tool; and a second page including a preview of a second object generated by a second online tool. The first page and the second page are displayed simultaneously within the workbook. Then, a command to execute a function against the first object is received, via the workbook, from a user. A request to execute the function is transmitted to the first online tool, where execution of the function generates a revised first object. The embodiment also operates by receiving a revised first page comprising a preview of the revised first object from the first online tool, and replacing the first page in the workbook with the revised first page.

Abstract: An indication of an action is received through and application program interface (API) provided by one or more hardware processing devices. The action corresponds to communication with a specified party. Multiple disparate tables stored in at least one database of a of a database environment associated with the one or more hardware processing devices are searched for records having the field property corresponding to the specified party. The field property from the corresponding multiple disparate tables are evaluated. A unified field property is determined based on the evaluation of the field property from the corresponding multiple disparate tables. The unified field property is returned through the API.

Abstract: A graph representation of a designated application may be created. The graph representation may include nodes that each represent a computer programming code statement associated with the designated application as well as edges that each represent a logical linkage between two or more computer programming code statements. A determination may be made as to whether the designated application constitutes an unacceptable security risk by comparing the designated graph representation with a plurality of comparison graph representations. When it is determined that the designated application constitutes an unacceptable security risk, a message may be transmitted to prevent the designated application from being executed.

Abstract: A method to provide multi-objective recommendations. The method includes receiving user input indicating a plurality of objectives, where each of the plurality of objectives indicates a desired goal for a field of interest, receiving user input indicating a plurality of actionable fields, receiving user input indicating selection of one of a plurality of records in a data set, determining, based on applying an evolutionary algorithm, one or more candidate changes to values of the plurality of actionable fields of the selected record, determining, for each of the one or more candidate changes, a multi-objective score for that candidate change, selecting one or more of the one or more candidate changes to recommend to a user based on the multi-objective scores of the one or more candidate changes, and providing, for display to the user, the selected one or more candidate changes as recommended changes.

Abstract: Technologies are provided for integrating learning data provided by an external learning platform (ELP) to create a custom learner experience within a context of an application provided by a cloud computing platform (CCP). The system can include the CCP, the ELP, learner APIs that expose a common learning data schema on the CCP, and a user interface platform (UIP). The UIP can include a compiler that transforms source code of UICs of a componentized learner user interface for usage on the CCP, and a bundler that generates a package of UI components (UICs) that are compatible for usage on the CCP. The UICs are specific to the learning data schema shared with the learner APIs. The UIP exports the package to the CCP, which composes the learning data provided via learner APIs and UICs from the package to provide the custom learner experience within the context of the application.

Abstract: Technologies are provided for tracking learning progress of an end user of a cloud computing platform when the end user is not registered with an external learning platform that provides an external learning application. In response to the end user interacting with virtual learning entities provided at the cloud computing platform, learning progress information with respect to the external learning application is generated. The interaction by the end user takes place in the context of an application provided by the cloud computing platform while in an active web session. The virtual learning entities represent content of the external learning application (e.g., learning content and contextual user information of the external learning application). When a user service of the external learning platform receives a request to persist the learning progress information for the end user, the user service can determine whether a corresponding user account (e.g.

Abstract: Disclosed are examples of systems, apparatus, methods and computer program products for automation of network security policy analysis and deployment. A server system can obtain a system input comprising two versions of a policy output. The system can generate a severity characteristic that indicates a severity of deploying the second version of the policy output. The system can then determine whether to deploy the second version of the policy output based on the severity characteristic. The system can then, in response to determining that the second version of the policy output is to be deployed, deploy the second version of the policy output to one of a plurality of clouds.

Abstract: Methods and apparatus for updating a denormalized database object after updating, deleting, or inserting a record in a source database object are described. A first operation on a source database object that involves a record of the source database object being updated, deleted, or inserted is performed. A first part of a corresponding second operation involving a respective record of the denormalized database object being updated, deleted, or inserted is performed. A query result that references an aggregate field of a set of records in the denormalized database object is altered. The altering includes an aggregation operation using values in the query result being performed and altering that part of the query result that includes the aggregate field of the set of records. A second part is optionally performed to complete the corresponding second operation and update the denormalized database object.

Abstract: Disclosed herein are system, method, and computer program product embodiments for improving user experiences within a cloud collaboration platform that integrates communication tools with word processor functions to enhance workflows, save time, and promote teamwork in the development of slide presentations. To improve usability, a cloud collaboration platform may furnish a reader mode to streamline the presentation review process. The reader mode may allow viewers to review the presentation as the presentation will eventually be presented to an audience. The viewers may provide comments and feedback on the presentation without being inundated with comments and metadata added to an edit mode of the presentation by the original authors.

Abstract: Described herein are a system, apparatus, device, method, and/or computer program product embodiments and/or combinations and sub-combinations thereof for displaying a live database record in a chat session. In a given embodiment, a collaborative communications system may cause display of a subset of fields the database record in a chat session. The collaborative communications system may detect activation of the chat session. The collaborative communications system may retrieve the current values of the subset of fields. Upon retrieval, the collaborative communications system causes display of the subset of fields of the database record including an updated value for a field in the chat session.

Abstract: Each of a plurality of wire web components predicted to be included in a graphical user interface (GUI) for presentation at a client machine. Each data object instance may be associated with a respective data object instance identifier and a respective one or more data object fields. A wire web component graph that includes a plurality of nodes may be constructed. A node may correspond to a wire web component, a data object field, or an application procedure interface (API). One or more of the data values may be retrieved from the respective APIs based on the wire web component graph. A GUI message including the retrieved data values and the wire web component graph may be transmitted to the client machine.

Abstract: Methods and systems are provided for declaratively configuring a sign up process and a sign up page for a particular service provider. User interface(s), which can be displayed at a user system of a particular service provider, can include a plurality of options for declaratively configuring different sign up processes and sign up pages for the particular service provider. After receiving a selection of one of the options to configure the sign up process and the sign up page, inputs can be received that can include an input that specifies one of a plurality of different types of identifiers associated with a user to be verified as part of the sign up process, and one of a plurality of different types of identity verification processes to define how the user will be verified as part of the sign up process for the service provider.

Abstract: A computing platform may be configurable to cause receiving a request from a video conferencing application while a video conference is in session, the request comprising one or more user parameters identifying one or more participants in the video conference session. The computing platform is also configurable to cause implementing a query of a database system, the query being configured to retrieve one or more user data objects associated with at least one participant, wherein the at least one participant is different from a user of the client device. The computing platform is further configurable to cause generating, a result object based, at least in part, on the retrieved one or more user data objects, the result object being configured to cause display, at a user interface of the video conferencing application, visual information about the at least one participant, and sending the result object to the video conferencing application.

Abstract: Database environments may choose to schedule complex analytics processing to be performed by specialized processing environments by caching source datasets or other data needed for the analytics and then outputting results back to customer datasets. It is complex to schedule user database operations, such as running dataflows, recipes, scripts, rules, or the like that may rely on output from the analytics, if the user database operations are on one schedule, while the analytics is on another schedule. User/source datasets may become out of sync and one or both environments may operate on stale data. One way to resolve this problem is to define triggers that, for example, monitor for changes to datasets (or other items of interest) by analytics or other activity and automatically run dataflows, recipes, or the like that are related to the changed datasets (or other items of interest).

Abstract: Disclosed embodiments are a computing system and a computer-implemented method related to predicting travel time by using adjacent travel time. The prediction may be based on correcting the nominal predictive travel time estimation using a relation between the predictive travel time estimation and the nominal predictive travel time estimation of a nearby commuting instance in a similar direction. This allows a reduced number of queries to the geographic information system, which may save time, costs and conserve communication resources.

Abstract: A method and system for capturing dynamic data from data fields of a product has been developed. The method includes first collecting a product data set with multiple data fields. Static data fields of the product data set are identified that contain pre-defined standardized data for multiple other data sets. Next, dynamic data fields of the data set are identified. A dynamic data field is created by a user and contains additional data that is unique and applicable only to the product data set. The static data fields and the dynamic data fields are stored separately in a database repository for later recovery.

Abstract: A request to access a virtual dataset identifying one or more changeset selection criteria may be received. One or more changesets may be selected based on the selection criteria. Each changeset may correspond with a point in time and may include data references to data items added to the virtual dataset at the point in time. A learning dataset that includes a plurality of data items may be identified.

Abstract: A virtual dataset may be created in a database system. The virtual dataset may include data items stored in a storage system that are each associated with a respective label. The virtual dataset may include a first changeset identifying the data items, and may be updated to include a second changeset identifying different data items later stored in the storage system and included in the virtual dataset. Access to a learning dataset that includes either the first changeset, the second changeset, or both, may be provided upon request.

Abstract: Methods and systems for interacting with a user to build a customer profile include: receiving, by a processor, an identifier of the user; retrieving, by the processor, personal information of the user from a database system based on the identifier; recognizing, by the processor, preference information of the user from an image of the user; obtaining, by the processor, additional preference information of the user by managing a dialog between the user and a mirror display system; and storing, by the processor, the customer profile based on the personal information, the preference information, and the additional dialog information.

Abstract: A method and system for code introspection in a multi-tenant architecture. The method includes receiving a query for code introspection from an entity, retrieving context for the entity that sent the query, retrieving raw code information based on the query, filtering the raw code information based on the context, and returning the filtered code information.

Abstract: One or more enrollment messages may be received via a communication message. The enrollment messages may include identification information associated with a designated person, health status information indicating the presence or absence of one or more medical symptoms associated with the designated person, and contact information identifying one or more individuals with which the designated person has recently come into physical proximity. A visual representation of a contact tracing graph may be generated for presentation on a user interface.