Abstract: Described herein are systems, apparatus, methods and computer program products configured for image detection/recognition of products. The disclosed systems and techniques utilize video data to provide the necessary number of images and view angles needed to train a machine learning product detection/recognition system to recognize a specific product within later provided images. In various embodiments, a user may provide video data and the video data may be transformed in a manner that may aid in training of the machine learning system.

Abstract: Techniques are disclosed for automatically generating new content using a trained 1-to-N generative adversarial network (GAN) model. In disclosed techniques, a computer system receives, from a computing device, a request for newly-generated content, where the request includes current content. The computer system automatically generates, using the trained 1-to-N GAN model, N different versions of new content, where a given version of new content is automatically generated based on the current content and one of N different style codes, where the value of N is at least two. After generating the N different versions of new content, the computer system transmits them to the computing device. The disclosed techniques may advantageously automate a content generation process, thereby saving time and computing resources via execution of the 1-to-N GAN machine learning model.

Abstract: Methods, media, and systems are disclosed for adding new users to a channel in a group-based communication system. The system receives a request to add new users to a channel. The system adds a new user by classifying the new user's email address domain as internal or external. If the domain is internal, the first user is added to the channel as a member, and if the domain is external, the user is prompted for a type of access for the new user. If the new user's access type is guest, the new user is added to the channel as a guest. If the type of access is shared, the channel is shared with an organization associated with the domain, and the new user is added as a member of the channel that has been shared.

Abstract: A cloud infrastructure is configured and deployed for managing services executed on a cloud platform. The cloud infrastructure includes a control datacenter configured to communicate with one or more service datacenters. The service datacenter deploys one or more application programming interfaces (API's) associated with a service. The service datacenter also deploys an administration agent. The control datacenter hosts an engine that receives requests from users to perform administration operations by invoking the administration API's. In this manner, the control datacenter functions as a centralized control mechanism that effectively distributes administration operation requests as they are received from users to service datacenters that can service the requests. The cloud infrastructure provides an auditable, compliant and secure management system for administering services for distributed systems running in the cloud.

Abstract: Computing systems, for example, multi-tenant systems deploy software artifacts in data centers created in a cloud platform using a cloud platform infrastructure language that is cloud platform independent. The system receives a declarative specification for creating a datacenter on a cloud platform. The system generates an aggregate pipeline comprising a hierarchy of pipelines. The system generates an aggregate deployment version map associating data center entities of the data center with versions of software artifacts targeted for deployment on the datacenter entities. The system collects a set of software artifacts according to the aggregate deployment version map. The system executes the aggregate pipeline in conjunction with the aggregate deployment version map to create the datacenter in accordance with the cloud platform independent declarative specification.

Abstract: A computer-implemented method and corresponding systems and apparatuses for configuring the visual appearance of a webpage. The method involves providing access to color schemes through a user interface of a software application and assigning color schemes to corresponding sections of the webpage based on user input. Each color scheme includes at least one foreground color paired with a corresponding background color that contrasts the foreground color. The method further involves generating source code representing the webpage. In some examples, the source code includes a first container corresponding to a first section and a second container corresponding to a second section. The first container includes properties corresponding to a first color scheme. Similarly, the second container includes properties corresponding to a second color scheme. Because the second section is a subsection of the first section, the source code is generated with the second container being nested within the first container.

Abstract: A method for a server to manage data in a peer-to-peer blockchain network is described herein. The method includes generating, by a multi-tenant web server, an exchange object for the peer-to-peer blockchain network, wherein the exchange object includes a set of exchange fields and a mapping between each exchange field in the set of exchange fields and a field of a physical object associated with each peer in the peer-to-peer blockchain network; generating, by the multi-tenant web server, a transaction object based on the exchange object, wherein the transaction object includes the set of exchange fields and proposes an alternation to a physical object; and making, by the multi-tenant web server, the transaction object available to the peers in the peer-to-peer blockchain network to attempt to obtain consensus for the alteration.

Abstract: This disclosure is directed to a group-based communication system that is configured to generate a group-based communication interface comprising a priority pane, a last actions pane, and a missed pane. Each of the priority pane, the last actions pane, and the missed pane and configured for efficient positioning within a defined display window of a client device.

Abstract: System, method, and/or computer program product embodiments for automatic removal of sensitive data items from records are disclosed. In one or more embodiments, a record with a sensitive field (for storing a sensitive data item) is linked to a self-removal data policy that includes a condition set. When the condition set is true, the sensitive data item is automatically removed from the record without deleting the record and without removing other data items stored in other fields of the record. Conditions may be associated with a time period following the upload or storage of the sensitive date item, the occurrence of an event that requires the sensitive date item, a read or approval of the sensitive data item, etc. A user may modify a condition in the condition set to make the condition more stringent or less stringent.

Abstract: Methods, systems, and devices for data processing are described. Some systems may support data processing permits and cryptographic techniques tying user consent to data handling. By tying user consent to data handling, the systems may comply with data regulations on a technical level and efficiently update to handle changing data regulations and/or regulations across different jurisdictions. For example, the system may maintain a set of data processing permits indicating user consent for the system to use a user's data for particular data processes. The system may encrypt the user's data using a cryptographic key (e.g., a cryptographic nonce) and may encrypt the nonce using permit keys for any permits applicable to that data. In this way, to access a user's data for a data process, the system may first verify that a relevant permit indicates that the user complies with the requested process prior to decrypting the user's data.

Abstract: Management of hosted channel membership of a communication platform is described. A request can be received from a first client of a first user, associated with a first organization, of the group-based communication platform, wherein the request is to associate a second user, associated with a second organization, with a communication channel of the first organization. An invitation to join the communication channel can be sent to a second client of the second user. In response to receiving an indication of an acceptance of the invitation, the second user can be associated with the communication channel. A request can be received from the second client to associate other user(s) associated with the second organization with the communication channel and the other user(s) can be associated with the communication channel based at least in part on permission(s) associated with the communication channel.

Abstract: Methods, systems, and devices supporting physical proximity graphing are described. Some systems may store a limited set of location information for a set of humans (e.g., refraining from tracking device location information to maintain user privacy). A system may send a survey to each person indicating a suggested list of people based on the location information. The people may provide feedback confirming whether encounters occurred with each suggested human. The system may use this information to generate a graph using hashed identifiers to obfuscate user identities, where the graph tracks connections between people (e.g., based on encounters within a time period). Based on a trigger event, the system may analyze the graph and identify a set of hashed identifiers connected to a person of interest (e.g., traversing multiple levels of the graph). The system may transmit messages to people corresponding to the identified set of hashed identifiers.

Abstract: A communication platform can leverage a network-based computing system to enable applications to exchange data with one or more applications via channels. In some examples, a first application may post messages to the channel and a second application may listen to the posted messages to identify an event based on one or more of the messages. Responsive to detecting an event, the second application may notify a user, create a new channel, add a user to a channel, or the like, and/or the second application may take an action to remediate an issue. The first application and the second application and users added to the channel may be associated with a same or different organizations.

Abstract: Disclosed herein are system, method, and computer program product embodiments for capturing incoming communications from a sender across multiple channels, and determining whether to include those communications from the sender in an inbox using a waiting room. The waiting room lists unknown senders, and allows a user to add the senders to a blocklist, where the sender's communications are omitted from the user's inbox, or to a passlist, where a new CRM customer record is created for the sender. With the CRM customer record created, future communications from the sender are matched to the CRM customer record and permitted for inclusion in an inbox. This way, recipients can prioritize customers (or other high-value communications) within their inbox based on a corresponding existing CRM customer record, while simplifying the capture of those CRM customer records.

Abstract: A request for a transaction between a client system and a server system may be processed. The transaction may be associated with transmission of data between the client system and the server system. The data may be encrypted using a transient encryption key to form encrypted data. The transient encryption key may be a synced-clock random number configured to automatically change when a designated time interval elapses. The encrypted data may be transmitted between the client system and the server system.

Abstract: Various examples are directed to systems, methods, and apparatuses for providing an interactive developer interface of a group-based communication system. Various examples are directed to systems, methods, and apparatuses for consolidating application data associated with an application within a group-based communication interface. Various examples are directed to systems, methods, and apparatuses for indexing processing actions associated with a plurality of applications.

Abstract: An application server may receive, via a user interface of a cloud-based data management platform storing a set of data objects, a user input to generate a communication channel of a group-based communication platform that is separate from the cloud-based data management platform. In some examples, the communication channel may be for a data object of the plurality of data objects. The application server may then retrieve a group of users that are linked to the data object within the cloud-based data management platform and display a list of options for generating the communication channel. The list of options may include the group of users for including in the communication channel, a privacy level for the communication channel, and an identifier of the communication channel. The application server may generate an executable packet of instructions and transmit the executable packet of instructions for ingesting into the group-based communication platform.

Abstract: The techniques may include maintaining a thread of events for a plurality of users, where each element of the thread corresponds to an event/activity and includes at least a next field that includes a first subset of the plurality of users and a previous field that includes a second subset of the plurality of users. These techniques may allow new events to be quickly added and prior elements may be updated to reflect the addition. Further, the thread elements may allow the thread to be quickly traversed to identify queried information such that the information may be displayed to a user.

Abstract: A system, method, and computer-readable media for surfacing relevant topics discussed in a synchronous multimedia collaboration session to interested non-participants of the synchronous multimedia collaboration session. A relevant topic of the synchronous multimedia collaboration session may be determined based in part on audio data from the synchronous multimedia collaboration session. At least one non-participating member with an interest in the relevant topic of the synchronous multimedia collaboration session may be identified. A notification of the synchronous multimedia collaboration session associated with the relevant topic may be surfaced to the at least one non-participating member.

Abstract: A seed value assigned to a database table is determined. Numerically ordered invocation numbers are determined. Unordered pseudorandom numbers are generated based on the seed value and the invocation numbers to index temporally ordered data changes to the database table. It is determined whether the total number of yet-to-be-saved pseudorandom numbers reaches a maximum total number threshold. If so, the yet-to-be-saved pseudorandom numbers and a sequence of corresponding invocation numbers are saved in a sync table.

Abstract: Embodiments of the present disclosure provide methods, systems, apparatuses, and computer program products for generating a third-party resource usage map in a group based communication system, where the third-party resource usage map comprises a plurality of third party resource usage records and each third-party resource usage record comprises a user identifier, a third-party resource provider identifier, and a third-party resource access token.

Abstract: A system, for example, a multi-tenant system performs upgrades of database management systems deployed on a cloud platform. The database management system is stored on the cloud platform in a data storage unit for storing data of the database, and an instructions storage unit for storing executable instructions. A cloud platform image comprising instructions for the database management system is received. A cloud platform image is deployed on a new instructions storage unit. An upgraded database management system is built by providing the new instructions storage unit with access to the data storage unit. In an embodiment, the database management system is used by a multi-tenant system and stores a multi-tenant schema. The structure of the multi-tenant schema is defined using a multi-tenant schema template that is included in the instructions storage unit.

Abstract: Sentiment analysis is a task in natural language processing. The embodiments are directed to using a generative language model to extract an aspect term, aspect category and their corresponding polarities. The generative language model may be trained as a single, joint, and multi-task model. The single-task generative language model determines a term polarity from the aspect term in the sentence or a category polarity from an aspect category in the sentence. The joint-task generative language model determines both the aspect term and the term polarity or the aspect category and the category polarity. The multi-task generative language model determines the aspect term, term polarity, aspect category and category polarity of the sentence.

Abstract: A method for data processing includes identifying, for communication of a content object, a segment of entities based at least in part on a selection of a first attribute at a user interface. The first attribute may be selected from attributes defined by a data model and configured for a tenant of a multi-tenant system. The method further includes activating a set of attributes of the plurality of attributes based at least in part on the identified segment of entities and the data model. The method further includes, receiving a selection of a second attribute of the set of attributes, identifying, for the segment of entities, a set of inputs corresponding to the selected second attribute, and transmitting, to a content communication system for distribution of the content object, an indication of a plurality of entity identifiers corresponding to the segment of entities and the set of inputs.

Abstract: Various embodiments of the present disclosure are directed to a group-based communication system that is configured to more efficiently manage resource sharing requests. In particular, in some embodiments, the group-based communication system is configured to enable admin users to use an external service, such as an external approval provisioning service, that is separate and distinct from the group-based communication system to manage group-based communication resource sharing requests. In other embodiments, the group-based communication system is configured to allow communication with external users and to trigger new user onboarding protocols through the ingestion of external user directories associated with a sponsor user.

Abstract: Various embodiments of the present disclosure provide apparatuses, systems, and computer program products for group-based communication channel organization. In this regard, embodiments described herein are configured to enable group-based communication interfaces rendered with group-based communication channels organized into specific organized channel sets. A plurality of organized channel sets may be reorganized, and/or the associated channel set for each organized channel set may be reorganized.

Abstract: Systems, devices, and techniques are disclosed for endpoint URL generation and management. An entity identifier may be received. The entity identifier may be hashed with a hashing algorithm to generate an alphanumeric string. A custom endpoint URL may be generated by combining the alphanumeric string with a URL that identifies an endpoint located on a server of a cloud computing system. A CNAME record in a DNS database may be updated to associate the URL that identifies the endpoint located in a stack of cloud computing system with the custom endpoint URL.

Abstract: Methods, systems, and devices are described that support extensible data mapping. A data mapping server may receive an indication of a source schema for a data source and may receive a user input indicating creation of a custom data object to handle the source schema. The server may create the custom data object based on the user input. The data mapping server may automatically map one or more data fields for a source data object (e.g., based on the source schema) to one or more custom data fields for the custom data object (e.g., based on a custom schema). The server may import a set of data records stored at the data source and may store the data records in a database system according to the custom schema based on the data mapping. The stored custom data objects may be used for segmentation, activation, analysis, or some combination thereof.

Abstract: Techniques are disclosed relating to provisioning fault domain sets (FDS). In some embodiments, a computer server system implements an FDS for disseminating a storage service across a plurality of fault domains. To implement the FDS, in some embodiments, the computer server system access FDS data specifying a desired state of the FDS in which the storage service is disseminated across at least a particular number of fault domains. The computer server system may determine available resources of the plurality of fault domains and determine a current state of the FDS based on fault domains that have already been provisioned to the FDS. Based on at least the desired state of the FDS, the current state of the FDS, and the available resources, the computer server system provisions one or more additional fault domains to the FDS to reconcile the FDS's current state with the FDS's desired state.

Abstract: In accordance with embodiments, there are provided mechanisms and methods for facilitating secure communication of data during transactions across multiple transaction entities in database systems according to one embodiment. In one embodiment and by way of example, a method includes receiving a request to facilitate a financial transaction, wherein the request is received from an external computing device and includes sensitive data and one or more transient keys associated with a user, and selecting a gateway from multiple gateways to facilitate performance of the financial transaction, where the gateway is selected based on participation in securing of the sensitive data.

Abstract: Disclosed herein are system, method, and computer program product embodiments for providing offline capabilities to customizable live applications in a cloud collaboration platform. The cloud collaboration platform may provide offline functions and a data application programming interface to devices connecting to the cloud collaboration platform. The offline capabilities allow devices to store data related to documents and customizable live applications in a local cache. The offline capabilities retrieve data from and store modifications to data within the local cache. The cloud collaboration platform may subsequently process the changes and determine if conflicts arise, resolving conflicts where appropriate and possible. The cloud collaboration platform may then determine a final state for a record, return the final state to the devices, and update the local caches.

Abstract: Modifying direct message (DM) communication membership is described. A communication platform can receive, in association with a DM communication and from a user computing device of a user of a first group of users, a first request to modify the first group of users. The communication platform can send a second request to designate whether to include context data associated with the DM communication in a new or existing DM communication. Based on receiving an indication to include at least a portion of the context data associated with the DM communication in the new or existing DM communication, the communication platform can generate the new DM communication, wherein the new DM communication is associated with a second group of users different than the first group of users, and at least the portion of the context data is associated with the new DM communication.

Abstract: Embodiments of apparatus, systems, and methods are described for creating and managing an abstract, API-based infrastructure base model. The API-based model can abstract infrastructure assets, such as infrastructure components or connections between components, into a metadata model using standardized syntax and interfaces, for defining and building an infrastructure. Using a modeling document, connections and components of an infrastructure can be abstracted into an API-based model having semantics that covers them all. Connections and infrastructure components can be made available for selection, arrangement, and grouping to build complex infrastructure models without requiring complex API coding by the user. Other infrastructure models having different API definitions can be by abstracted to standardize the assets for building new APIs. The APIs can be further modified and exported to another or the same implementation project.

Abstract: A method by an email sending system to send emails from different public sending network addresses. The method includes receiving, by a load balancer, an email that is to be sent by the email sending system, sending, by the load balancer, the email to a mail transfer agent (MTA) instance from a plurality of MTA instances, wherein each of the MTA instances has access to configuration data that indicates which proxy virtual machines (VMs) serve as egresses for which public sending network addresses, determining, by the MTA instance, a public sending network address to send the email from, determining, by the MTA instance based on consulting the configuration data, a proxy VM that serves as an egress for the public sending network address, and sending, by the MTA instance, the email to the proxy VM for sending to its destination from the public sending network address.

Abstract: A computing platform may be configurable to cause receiving a request from a video conferencing application while a video conference is in session, the request comprising one or more user parameters identifying one or more participants in the video conference session. The computing platform is also configurable to cause implementing a query of a database system, the query being configured to retrieve one or more user data objects associated with at least one participant, wherein the at least one participant is different from a user of the client device. The computing platform is further configurable to cause generating, a result object based, at least in part, on the retrieved one or more user data objects, the result object being configured to cause display, at a user interface of the video conferencing application, visual information about the at least one participant, and sending the result object to the video conferencing application.

Abstract: Embodiments of the present disclosure provide methods, systems, apparatuses, and computer program products that provide for an improved, more efficient, and more stable system of networked computing devices. The embodiments disclose an apparatus and system that enable client devices to selectively grant to third party applications permissions to access group-based communication objects of a group-based communication system. The apparatus and system further enable client devices to selectively grant to third party applications permissions to take specific actions with regards to the group-based communication objects within the system. To accomplish the improvements, the disclosed systems, apparatuses, and computing devices maintain a record of the permissions granted to third party applications in a permissions table stored in a computer storage device.

Abstract: Techniques are disclosed relating to the distribution of database key permissions. A database system may distribute first permission information to a plurality of database nodes that identifies a distribution of key range permissions to ones of the plurality of database nodes. A given key range permission being distributed to a given database node may permit that database node to write records whose keys fall within a key range associated with the given key range permission. The database system may receive, from a first database node, a request for a first key range permission provisioned to a second database node. The database system may modify the first permission information to derive second permission information that provisions the first key range permission to the first database node instead of the second database node. The database system may distribute the second permission information to ones of the plurality of database nodes.

Abstract: Secure peer-to-peer connection network and/or protocols for a group-based communication system, in which, a peer-to-peer connection request associated with a first identifier for a first client device and a second identifier for a second client device are received. The first identifier and the second identifier are compared to a group-based communication system validation registry associated with the group-based communication system and, based at least in part on a determination that the peer-to-peer connection request is authorized per the group-based communication system validation registry, a peer-to-peer connection between the second client device and the first client device is established.

Abstract: Using proximity data to update user interfaces for users of a communication platform is described. The communication platform can determine, for a first user of the communication platform, a first location of the first user and for at least a second user of the communication platform, a second location of the second user. Based at least in part on a determination that the first location and the second location satisfy a condition, the communication platform can cause a user interface of the communication platform to be updated, wherein the updated user interface indicates at least one of (i) proximity data associated with the first user and the second user or (ii) context data associated with at least one of the first user or the second user.

Abstract: Computing systems, for example, multi-tenant systems create data centers in a cloud platform using a cloud platform infrastructure language that is cloud platform independent. The system receives a cloud platform independent declarative specification describing a new datacenter to be created or modifications to an existing datacenter deployed on a cloud platform. The system compiles the cloud platform independent declarative specification to generate a metadata representation of the data center. If the datacenter is existing, the system generates a metadata representation representing modifications to the datacenter to obtain a desired datacenter. The system sends the metadata representation and a set of instructions for execution on a target cloud platform. The target cloud platform executes the instructions to configure the data center. The system provides users with access to the computing resources of the data center configured by the target cloud platform.

Abstract: A database system may receive a natural language query that is associated with a tenant of a multi-tenant system. The natural language query may be parsed into a set of tokens, and the set of tokens may be tagged, using a tenant specific tagging model associated with the tenant, the set of tokens with at least one pre-configured data type identifier that is configured for the plurality of tenants. A global tagging model that supports the plurality of tenants of the multi-tenant system may tag the set of tokens with at least one category identifier. The global tagging model may use the natural language query and the pre-configured data type identifier to identify the at least one category identifier. The system may execute a database query on a database associated with the tenant using the at least one pre-configured data type identifier and the at least one category identifier.

Abstract: A method for replicating a set of parent resources from an administrator namespace to a set of tenant namespaces is described. The method includes receiving, by the administrator namespace, a global object that includes a set of object fields that reference (1) a set of parent resources and (2) the set of tenant namespaces; monitoring, by an operator controller of the administrator namespace, the global object to determine whether a change has been made to the global object; and replicating, by the operator controller, the set of parent resources to the set of tenant namespaces as child resources based on the global object in response to detecting a change to the global object.

Abstract: Disclosed are some implementations of systems, apparatus, methods and computer program products for executing a process flow represented by a graph or portion thereof using cached subgraphs. A first request to execute a first portion of a process flow is processed, where the first portion of the process flow is represented by a first subgraph of a graph representing the process flow and a final node of the first subgraph corresponds to a set of computer-readable instructions. The first portion of the process flow is executed such that a first output of executing the first portion of the process flow is obtained. The first subgraph is stored in association with the first output in a first cache entry of a cache. A second request to execute a second portion of the process flow is processed, where the second portion of the process flow is represented by a second subgraph of the graph.

Abstract: System and methods of the disclosed subject matter provide segregating, at a memory storage coupled to a multitenant database system, first tenant data of a first tenant from at least second tenant data of a second tenant, based on a first tenant identifier. A first encryption key associated with the first tenant may be retrieved from a key cache memory based on the first tenant identifier, to encrypt one or more fragments of the first tenant data. The fragments of the first tenant data may be encrypted based on the retrieved encryption key. Non-encrypted header information may be generated for each of the encrypted fragments of the first tenant data, where the header information may have metadata including the first tenant identifier. The encrypted fragments of the first tenant data and the corresponding non-encrypted header information may be stored in the immutable storage.

Abstract: Systems and methods initialize distributed client device membership for new client devices joining a group-based communication channel established for content exchange among a plurality of distributed client device members. The systems and methods comprise aspects for executing a content analysis over the content of the one or more group-based communication channels to identify characterizing terms associated with each group-based communication channel. After the content analysis is performed, systems receive search parameters from a potential new member client device for a group-based communication server. Various systems and methods provide selected search results generated based at least in part on a determination that characterizing terms match one or more of the search parameters to the client device. Those selected results comprise a target that is executable by the client device to join the associated group-based communication channel.

Abstract: Disclosed are some implementations of systems, apparatus, methods and computer program products for facilitating the implementation of declarative transaction control. A database transaction control configuration associated with an element of a process flow can be obtained via a graphical user interface (GUI) and stored in association the element. The database transaction control configuration indicates whether a pending database transaction is to be committed to a database prior to executing a set of computer-readable instructions corresponding to the element. During execution of the process flow, the database transaction control configuration is accessed and it is determined whether a currently pending database transaction is to be committed to a database prior to executing a set of computer-readable instructions corresponding to the element.

Abstract: The method system described herein is configured to identify and execute a next recommended action for a user based on the user's audio input. In an embodiment, the system is configured to receive audio input from the user and convert the audio input into a string. The system may identify an attribute associated with the user. The system may identify a type of action based on the string. The system may query a data repository using the attribute associated with the user to retrieve information associated with the type of action. The system may identify a recommended action for the user based on the information associated with the type of action. The system may then execute the recommended action for the user.