Abstract: A text-to-database neural network architecture is provided. The architecture receives a natural language question and a database schema and generates a serialized question-schema representation that includes a question and at least one table and at least one field from the database schema. The serialized question-schema representation is appended with at least one value that matches a word in the natural language question and at least one field in a database picklist. An encoder in the architecture generates question and schema encodings from the appended question-schema representation. Schema encodings are associated with metadata that indicates a data type of the fields and whether fields are associated with primary or foreign keys. A decoder in the architecture generates an executable query from the question encodings and schema encodings.

Abstract: Techniques are disclosed relating to managing dependencies between shared data objects in a database system. In various embodiments, a data storage system may maintain a function cache that is operable to store functions that are accessible to one or more applications hosted by a server system. In response to a request to invalidate a first data type utilized by one or more of these functions, various embodiments may include accessing an inverted index that specifies a mapping between data types and corresponding functions, stored in the function cache, which depend on those data types. Using the inverted index, various embodiments include identifying a set of functions that depend on the first data type and invalidating the set of functions in the function cache such that the set of functions are no longer accessible by the applications.

Abstract: Machine learning based models recognize objects in images. Specific features of the object are extracted from the image using machine learning based models. The specific features extracted from the image assist deep learning based models in identifying subtypes of a type of object. The system recognizes the objects and collections of objects and determines whether the arrangement of objects violates any predetermined policies. For example, a policy may specify relative positions of different types of objects, height above ground at which certain types of objects are placed, or an expected number of certain types of objects in a collection.

Abstract: A system compares two network security specifications expected to implement the same network security policy for a network and identifies possible discrepancies between them. The system generates a representation of relations between subnetworks of the network for each network security specification. The representation efficiently stores permitted connections between subnetworks. The system compares the representations corresponding to the two network security specifications to identify discrepancies across the two network security specifications. If discrepancies are identified across the two network security specifications the system generating a report identifying the discrepancies.

Abstract: Disclosed are examples of systems, apparatus, methods and computer program products for providing run-time querying of multi-tenant non-relational database objects. A database system maintains a multi-tenant non-relational database associated with a number of enterprises, a number of records, and a number of data objects for each of the enterprises, each data object having at least one composite key field. A request is received during runtime to query data related to a data object, and the system determines that the data object is defined to be used in associated with a non-relational database. The system then retrieves a metadata model of the data object, determines that the request includes at least one composite key field for the data object, and processes the requery to query data in synchronous fashion. Finally, a query response is provided to the user.

Abstract: Some embodiments comprise integrating information from a social network into a multi-tenant database system. A plurality of information from the social network is retrieved, using a processor and a network interface of a server computer in the multi-tenant database system, wherein the plurality of information is associated with a message transmitted using the social network. Metadata related to the transmitted message is generated, using the processor. A conversation object is generated, using the processor, based on the plurality of information associated with the transmitted message and the metadata related to the transmitted message. The conversation object is then stored in an entity in the multi-tenant database system, using the processor of the server computer.

Abstract: Various embodiments of the present disclosure are directed to a group-based communication apparatus that is configured to enable end-users (e.g., non-admin users) to initiate, by way of client devices, generation of a shareable resource associated with a group-based communication resource identifier to efficiently authorize communication between client devices associated with different organization identifiers in group-based communication interfaces associated with a shared group-based communication resource identifier.

Abstract: Techniques and structures to facilitate automatic adjustment of a database connection pool, including calculating a first value indicating a number of connections of to be provided by a first of a plurality of application servers, determining whether the first value is equal to a second value previously calculated to indicate the number of connections to be provided by the first application server and adjusting the database connection pool by providing the number of connections to access the database as indicated by the first value upon a determination that the first value is not equal to the second value.

Abstract: A method for failure event notification in an event recordation and distribution system. The method including monitoring each stage of processing of an event by an event publisher manager, detecting a failure of the event to publish in the event recordation and distribution system, and publishing an error event notification to a status stream in response to detecting the failure.

Abstract: Disclosed implementations may include receiving a first communication comprising first content generated by a first user; identifying authentication metadata embedded within the first communication; receiving a second communication generated by a second user, wherein the second communication comprises second content and the authentication metadata; decoding the authentication metadata from the second communication; parsing the first content of the first communication and the second content of the second communication; determining that the first content is different than the second content based at least in part on the parsing; and generating an alteration notification based at least in part on the determining.

Abstract: Methods, computer readable media, and devices for securely managing interactions between distributed components are provided. One method may include generating a first interaction identifier based on a first component identifier and data to be shared with a second component, storing the first interaction identifier in an interaction data store of the first component, sending a request to the second component including the first component identifier, the first interaction identifier, and the data to be shared with the second component, creating a graph node in an interaction relationship data store based on the first interaction identifier, receiving a response from the second component including a second component identifier, a second interaction identifier, and response data, and adding a relationship edge in the interaction relationship data store connecting the graph node based on the first interaction identifier with a graph node based on the second interaction identifier.

Abstract: A prediction model in a database system may be configured to predict, for a given object instance, a respective probability of acceptance for each of a plurality of recommendations. A determination may be made as to whether the prediction model is associated with sufficient training data to produce predictions at a designated accuracy rate. When it is determined that the prediction model is not associated with sufficient training data, for each of a first set of object instances a respective first message may be sent that includes a respective first one of the recommendations determined based on a static ranking rule applying one or more criteria to one or more object fields associated with the respective object instance. The prediction model may be updated to include additional training data based on a plurality of responses corresponding to a respective first one of the recommendations.

Abstract: Techniques are disclosed relating to automated operations management. In various embodiments, a computer system accesses operational information that defines commands for an operational scenario and accesses blueprints that describe operational entities in a target computer environment related to the operational scenario. The computer system implements the operational scenario for the target computer environment. The implementing may include executing a hierarchy of controller modules that include an orchestrator controller module at top level of the hierarchy that is executable to carry out the commands by issuing instructions to controller modules at a next level. The controller modules may be executable to manage the operational entities according to the blueprints to complete the operational scenario.

Abstract: Embodiments of the present disclosure provide methods, systems, apparatuses, and computer program products that are configured to provide authenticated access to a service application. The embodiments disclose an apparatus and system configured to launch an authenticated service application session in response to capturing authentication success rendering comprising visual authentication indicia. The authentication success rendering is a captured via a user device display, and includes visual authentication indicia. To facilitate rendering of the authentication success rendering, embodiments output a browser sign-in session request configured to launch a browser sign-in session associated with a browser application. Additionally, to facilitate capturing the rendering, embodiments initiate a display recorder module configured to capture, during the browser sign-in session and via the user device display, authentication success rendering comprising visual authentication indicia.

Abstract: Methods, computer readable media, and devices for dynamically identifying and associating disparate records are disclosed. One method may include receiving a first set of association criteria, identifying a first source object and a first target object based on the first set of association criteria, creating a first association object indicating an association between the first source object and the first target object, storing the first association object, receiving a second set of association criteria, identifying a second source object and a second target object based on the second set of association criteria, and creating a second association object.

Abstract: Disclosed are some implementations of systems, apparatus, methods and computer program products for enabling out of office message settings of multiple computing systems using a single out of office message configuration. A request to generate an out of office message configuration associated with a user is received and an indication of computing systems associated with the request is obtained. In addition, an indication of a start date, an indication of an end date, and an out of office message are obtained in association with the request. The out of office message configuration is saved such that the start date, end date, and out of office message are associated with the computing systems and the user.

Abstract: Computing systems may support image classification and image detection services, and these services may utilize object detection/image classification machine learning models. The described techniques provide for normalization of confidence scores corresponding to manipulated target images and for non-max suppression within the range of confidence scores for manipulated images. In one example, the techniques provide for generating different scales of a test image, and the system performs normalization of confidence scores corresponding to each scaled image and non-max suppression per scaled image These techniques may be used to provide more accurate image detection (e.g., object detection and/or image classification) and may be used with models that are not trained on modified image sets. The model may be trained on a standard (e.g. non-manipulated) image set but used with manipulated target images and the described techniques to provide accurate object detection.

Abstract: Techniques are disclosed relating to building an in-memory multi-level data structure useable to determine presence or absence of key ranges in files consisting of database records. In various embodiments, a computer system operates a database, including maintaining a set of records having a set of corresponding keys that are accessible in key-sorted order and generates a multi-level data structure that facilitates key range lookups against the set of records. The generating may include accessing ones of the set of keys in key-sorted order and determining, for a particular accessed key that includes a set of characters, an intermediate level within the multi-level data structure and a subset of the characters of the particular accessed key for insertion. The computer system may insert, starting at the intermediate level, information that identifies the subset of characters, with the inserting being performed without traversing any levels before the intermediate level.

Abstract: A communication platform may comprise different systems for helping a user discover features of the platform. However, the systems may generate different results. An application programming interface (API) may receive such outputs and may be configured to select between the outputs based on detecting a state at a user's computing device and/or using a machine-learned model to weight the outputs and/or probabilities associated therewith using a target metric. The API may then rank the outputs and select from among them based at least in part on the target metric.

Abstract: Disclosed herein are system, method, and device embodiments for implementing a customizable animation experience. A multi-tenant service may associate an animation element with a visual component of an application, and generate a markup component including an animation parameter configured to customize the animation element within the application code. Further, the multi-tenant service may receive a request for the animation from an animation manager based on execution of the application code, and send the animation information to the animation manager. In some embodiments, the animation manager is configured to set the animation parameter to the animation information and present an animation associated with the animation element based on the animation parameter.

Abstract: Method, apparatus and computer program product for querying a group-based communication platform are described herein. For example, the apparatus comprises at least one processor and at least one non-transitory memory including program code. The at least one non-transitory memory and the program code are configured to, with the at least one processor, cause the apparatus to at least store a plurality of electronic messages to a message corpus; receive a search query associated with the message corpus, wherein the search query comprises reaction metadata criteria; and apply the search query to the message corpus to generate a reaction search results set.

Abstract: Methods, computer readable media, and devices for rapid prototyping of both user experience and technical features in a combined approach. One method may include creating a set of known user experience (UX) components including a user interface element representing at least one of a data element and a data interaction, creating a UX screen including a set of UX elements within a UX prototyping tool, translating the UX screen into a set of standardized UX components, publishing the set of standardized UX components by mapping the set of standardized UX components to synthetic data, and validating a technical aspect of the published set of standardized UX components based on user interaction with the published set of standardized UX components.

Abstract: A service, responsive to a request, determines a scope that includes a specific tenant and a specific component. The service is extensible through addition of different components to manage different data sources used by different services that contribute to a set of one or more multi-tenant cloud services. The service also determines, for the specific component, parameters usable to identify the specific tenant and a specific storage path. Each of the components, responsive to being called to perform a backup or restore with a current set of parameters, is to be implemented to cause data, which belongs to a currently identified tenant, to be copied between the respective one of the data sources and a backup store according to a currently identified storage path. The service also calls the specific component to perform the backup or restore with the parameters.

Abstract: Techniques for user behavior anomaly detection. At least one low-variance characteristic is compared to an expected result for the corresponding low-variance characteristics to determine if the low-variance characteristic(s) is/are within a pre-selected range of the expected results. A security response action is taken in response to the low-variance characteristic not being within the first pre-selected range of the expected results. At least one high-variance characteristic is compared to an expected result for the corresponding high-variance characteristics to determine if the high-variance characteristic(s) is/are within a pre-selected range of the expected results. A security response action is taken in response to the high-variance characteristic not being within the first pre-selected range of the expected results. Access is provided if the low-variance and the high-variance characteristics are within the respective expected ranges.

Abstract: A computing platform is implemented using a server system. The computing platform is configurable to cause identifying a data event associated with a user based on an interaction between the user and a user interface, and generating a segment data object based on the data event, a unique user identifier, and a segment database, the segment data object characterizing a membership of the user within an audience segment. The computing platform is also configurable to cause identifying a content data network server based on a geographical location of the user, the content data network server being a closest available content data network server to the user, and the content data network server being capable of serving, to the user, one or more data objects associated with metadata customized based on one or more segment data objects, and updating a local storage location of the content data network server.

Abstract: In accordance with embodiments, there are provided mechanisms and methods for creating, exporting, viewing and testing, and importing custom applications in a multitenant database environment. These mechanisms and methods can enable embodiments to provide a vehicle for sharing applications across organizational boundaries. The ability to share applications across organizational boundaries can enable tenants in a multi-tenant database system, for example, to easily and efficiently import and export, and thus share, applications with other tenants in the multi-tenant environment.

Abstract: Various embodiments of the disclosure are directed to updating a selected group-based communication interface of a plurality of group-based communication interfaces with an application dialog received from an external application. In an example, user interaction data associated with a group-based communication system can be received from a client device, and a triggering event, associated with an application external to the group-based communication system, can be identified from within the user interaction data. An application dialog request, associated with the triggering event, can be sent to the application and, in response to sending the application dialog request to the application, an application dialog can be received from the application.

Abstract: An HTML file transmitted to a client device is configured to call JavaScript code, where the JavaScript code is configured to call a requestAnimationFrame browser application programming interface (API) with an argument identifying a callback function. The callback function is configurable to cause the web browser to: 1) reset a first Cascading Style Sheets (CSS) animation of a first DOM element, the first CSS animation being configured to cause the first DOM element to transition from a hidden state to a visible state during a first time duration specified by a first animation-duration property of the first element using a specific set of CSS properties; and 2) call the requestAnimationFrame browser API with the argument identifying the callback function. Thus, the first DOM element remains hidden as long as the browser performs frame refreshes at an optimal rate. However, when the browser's main thread is busy, the first DOM element transitions to a visible state.

Abstract: Disclosed herein are system, method, and computer program product embodiments for managing cloud-based document permissions. In an embodiment, a document generation system may generate and/or store a cloud-based document. The document generation system may also generate links to the cloud-based document. The generated links may be associated with different permissions. For example, a first link may allow a first client device accessing the first link to edit the document while a second link may allow a second client device accessing the second link to only view the document. Other permissions may also include generating distinct graphical user interfaces (GUIs) associated with different links. The GUIs may accept input messages and/or comments in a chat panel. The document generation system may facilitate the delivery of these input messages to other client device with document access.

Abstract: Techniques are disclosed relating to lock wait tracing. A computer system may operate a database that includes a lockable object. The computer may maintain a lock wait queue that stores an indication of processes waiting to acquire a lock on the lockable object. The computer system may store trace records for those processes that, upon releasing a respective lock on the lockable object when another process is waiting in the lock wait queue, have been in contention for the respective lock for over a threshold amount of time. The computer system may present ones of the trace records that identify a timeline that is usable to determine a set of processes that contributed to a delay in a process acquiring a lock on the lockable object.

Abstract: An online system extracts information from non-fixed form documents. The online system receives an image of a form document and obtains a set of phrases and locations of the set of phrases on the form image. For at least one field, the online system determines key scores for the set of phrases. The online system identifies a set of candidate values for the field from the set of identified phrases and identifies a set of neighbors for each candidate value from the set of identified phrases. The online system determines neighbor scores, where a neighbor score for a candidate value and a respective neighbor is determined based on the key score for the neighbor and a spatial relationship of the neighbor to the candidate value. The online system selects a candidate value and a respective neighbor based on the neighbor score as the value and key for the field.

Abstract: Embodiments described herein provide methods and systems for summarizing multiple documents. A system receives a plurality of documents and generates embeddings of the sentences from the plurality of documents. The embedded sentences are clustered in a representation space. Sentences from a reference summary are embedded and aligned with the closest cluster. Sentences from each cluster are summarized with the aligned reference sentences as a target. A loss is computed based on the summarized sentences and the aligned references, and the natural language processing model is updated based on the loss. Sentences may be masked from being used in the summarization by identifying sentences that are contradicted by other sentences within the plurality of documents.

Abstract: A multi-master replication system is disclosed. The multi-master replication system allows a large set of peer instances to collaboratively replicate data to each other. According to an example, a change detection thread running on a first server associated with a first instance of multiple instances of a replicated database monitors for changes to any of multiple records within one or more shared tables of the replicated database. Responsive to detection of a change to a record, an item is stored by the change detection thread onto a queue containing information regarding the change. Groups of changes are packaged into multiple chunks, in which each chunk (i) corresponds to a discrete unit of progress for both change detection and transport; (ii) is associated with multiple changed records; (iii) contains metadata about the multiple changed records; and (iv) does not contain data from the one or more shared tables.

Abstract: Methods, systems, and devices for automated feature selection and model generation are described. A device (e.g., a server, user device, database, etc.) may perform model generation for an underlying dataset and a specified outcome variable. The device may determine relevance measurements (e.g., stump R-squared values) for a set of identified features of the dataset and can reduce the set of features based on these relevance measurements (e.g., according to a double-box procedure). Using this reduced set of features, the device may perform a least absolute shrinkage and selection operator (LASSO) regression procedure to sort the features. The device may then determine a set of nested linear models—where each successive model of the set includes an additional feature of the sorted features—and may select a “best” linear model for model generation based on this set of models and a model quality criterion (e.g., an Akaike information criterion (AIC)).

Abstract: An achievement platform may be maintained using a database system. A user interface may be displayed on a device of an authorized user of the achievement platform. The user interface may be configurable to allow the authorized user to create or modify customizable awards that are achievable based on customizable logic definable by the authorized user. The authorized user may be affiliated with a first one of a plurality of organizations implementing an application or service. Input, to create a first award based on first customizable logic may be processed. The first customizable logic may be configured by the authorized user such that satisfaction of conditions causes designated users associated with the application or service to be presented with the first award. It may be determined that a first user affiliated with the first organization has satisfied the conditions. The first user may be presented with the first award.

Abstract: Embodiments described herein provide methods and systems for presenting a document and generating a human-AI summary. A system provides a user with a selection of an amount of time to spend reading the document, or a list of questions from which the user may select which questions they would like answered by reading the document. The system highlights sections of the document according to the user selection. Implicit and explicit user data such as dwell times, user highlights, and user notes, are collected while displaying the document. A human-AI summary is generated based on the document and the user data.

Abstract: Methods, systems, and devices for distributed caching of encrypted encryption keys are described. Some multi-tenant database systems may support encryption of data records. To efficiently handle multiple encryption keys across multiple application servers, the database system may store the encryption keys in a distributed cache accessible by each of the application servers. To securely cache the encryption keys, the database system may encrypt (e.g., wrap) each data encryption key (DEK) using a second encryption key (e.g., a key encryption key (KEK)). The database system may store the DEKs and KEKs in separate caches to further protect the encryption keys. For example, while the encrypted DEKs may be stored in the distributed cache, the KEKs may be stored locally on application servers. The database system may further support “bring your own key” (BYOK) functionality, where a user may upload a tenant secret or tenant-specific encryption key to the database.

Abstract: Asynchronous collaboration via a communication platform is described. A message representative of an asynchronous meeting can be displayed via a user interface of a communication platform. The user interface can include an affordance to enable a user to add a snippet of content to the asynchronous meeting. In response to detecting an actuation of the affordance, an input user interface that includes an option to record or upload the snippet of content can be displayed. The snippet of content can be received from a client of a user associated with the asynchronous meeting and can be associated with other snippet(s) of content added by other user(s) associated with the asynchronous meeting. A preview summary of snippet(s) of content associated with the asynchronous meeting can be displayed in association with the message, wherein each snippet of content is viewable via a thread associated with the message.

Abstract: A multi-tenant computer system implements a platform for providing data protection scopes to shared infrastructure services according to a nested tenant model that permits a hierarchy having a plurality of levels. The multi-tenant computer system provisions data protection scopes for cloud products, service products, cloud product tenants, service products operating in the context of cloud products, service products operating in the context of cloud product tenants, and combinations of the foregoing.

Abstract: Some database systems may implement encryption services to improve the security of data stored in databases or on disks. The systems may implement encryption using multiple encryption keys. For example, a worker server may implement a system call interceptor, such as a filesystem in userspace (Fuse) driver. The system call interceptor may intercept system calls (e.g., associated with query or extract, transform, and load (ETL) jobs) as they enter or exit the kernel. The system call interceptor may determine whether data sets associated with the jobs are marked for encryption, and may perform an encryption process on the data sets. A worker may encrypt and store data sets on a worker disk or at a file store, or may retrieve and decrypt the data sets. The system may additionally manage encryption keys, and may provide mechanisms for archiving or revoking encryption keys while maintaining user access to stored data sets.

Abstract: Disclosed is a system for managing content generated by bots for presentation to a user in association with a chat application. The system receives content items generated by bots monitoring a chat application for display to a user at a user interface (UI) of the chat application. The system provides input based on the received one or more content items and associated contextual information to a trained machine learning (ML) model, and receives, from the trained ML model, for each of the content items, at least one score value based on at least one predicted user response associated with potentially displaying the content item to the user at the UI. The system selects a subset of content items from the received content items based on the received score values and causes a display of this selected subset of content items in addition to a display of content generated by the chat application.

Abstract: In accordance with embodiments, there are provided mechanisms and methods for advertisement distribution using a multi-tenant on-demand database system. These mechanisms and methods for distributing advertisements using a multi-tenant on-demand database system can integrate an advertisement distribution service with the services provided by the multi-tenant on-demand database system. The ability to provide an advertisement distribution service with the services provided by the multi-tenant on-demand database system can enable the distribution of advertisements to take advantage of other data stored by and/or services provided by the multi-tenant on-demand database system.

Abstract: Network request data is collected over a time window. The network request data is filtered to generate bypass network traffic records. Network performance categories are generated from the bypass network traffic records. Sufficient statistics of network optimization parameters are calculated for the network performance categories. The sufficient statistics of the network optimization parameters are used to generate network optimization parameters to determine data download performances of web applications.

Abstract: A mobile application development environment may be maintained in association with a computing platform. A request to produce a binary of a first mobile application may be processed. The binary and a package configurable to cause the binary to have code-sign credentials associated with a first organization when the binary is uploaded to a mobile application provider may be produced. The binary and the package may be provided to the first organization.

Abstract: A method for data processing that includes receiving, from a service that manages communications between a communication process flow management service and a communication platform, a request indicating metadata from the communication platform, information associated with a tenant of a multi-tenant system, a user identifier, or a combination thereof. The method may further include performing, based on the request, one or more actions on a communication process flow that controls electronic communications between the tenant and a set of users corresponding to the tenant. The method may further include generating a data object related to the communication process flow based on performing the one or more actions. The method may further include transmitting, to the communication platform, a message that is configured to cause posting of the data object into a communication channel of the communication platform.

Abstract: An apparatus, method and computer program product may be provided for updating a graph-based knowledge representation data structure using one or more conversation segments. Updating a graph-based knowledge representation data structure may include receiving a conversation segment. The conversation segment may comprise one or more group-based communication messages and one or more sending user identifiers of the one or more group-based communication messages. Updating a graph-based knowledge representation data structure may further include identifying the one or more sending user identifiers of each group-based communication message of the conversation segment. Updating a graph-based knowledge representation data structure may further include determining one or more user identifiers of the sending user identifiers that satisfy conversation participation criteria.