Abstract: Techniques and structures to provide dynamic deployment of access controls in an on-demand environment. A host electronic device may comprise one or more processors coupled with the at least one physical memory device, the one or more processors configurable to receive, via a user interface, request to access one or more resources managed by the electronic device in the multi-user, on demand computing environment, the request comprising one or more request elements, determine whether a virtual access rule logic comprises one or more virtual access check rules which are anchored to the one or more request elements, and in response to a determination that the virtual access rule logic comprises one or more virtual access check rules which are anchored to the one or more request elements, apply the one or more virtual access check rules to the request. Additional subject matter may be described and claimed.

Abstract: A method for configuring the operation of the software of a data as a service (DAAS) system during run time is described. The configuring includes at least one of configuring ingestion of a vendor dataset to produce an ingested dataset and which analysis operations to perform on the vendor dataset to produce an analyzed dataset, and the configuring also includes at least one of how to search the vendor dataset based on a search query from a customer to allow the customer to locate a new record from the vendor dataset and how to match records in the vendor dataset with a match query from the customer to provide an updated record to the customer.

Abstract: Disclosed are some implementations of systems, apparatus, methods and computer program products for handling multiple overflows of content during pagination of a web document. A first tree representing a web document is obtained. A first page element including one or more elements of the first tree is generated, where the elements include a first Document Object Model (DOM) element. Coordinates of the first DOM element within the first page element are calculated. A first context associated with the first DOM element is pushed onto a context stack. An overflow of the first DOM element is detected in relation to the first page element based, at least in part, on the coordinates. Responsive to detecting the overflow, the context stack is added to an overflow list and the first page element is modified such that the first DOM element or portion thereof is removed from the first page element.

Abstract: Techniques described herein may support a learned ontology or meaning for user, organization, or customer specific data. According to the techniques described herein, a set of datasets corresponding to an entity may be processed to generate a master dataset including rows that include at least a field name and a value corresponding to the field. The master dataset is processed to generate a corpus of text strings that is input into a word embedding function which generates a set of vectors based on the corpus. Because the configuration of the text string positions values by field names and field values, implicit relationships and contexts are identified within the data using the word embedding function.

Abstract: Techniques for providing an enhanced user profile to provide relevant information to a user requesting to view a user profile associated with another user. In an example, a first user submits a request to view a user profile associated with a second user. In response to receiving the request, the communication platform identifies one or more communication objects (e.g., communication channels, direct messaging instances, messages, threads, etc.) and/or one or more applications (third-party applications, first party applications, etc.) associated with the second user and/or the first user. The communication platform causes a display of indicator(s) associated with the communication object(s) and/or application(s) in association with the user profile, such as to enable efficient access to the associated communication object(s) and/or application(s).

Abstract: Database environments may choose to schedule complex analytics processing to be performed by specialized processing environments by caching source datasets or other data needed for the analytics and then outputting results back to customer datasets. It is complex to schedule user database operations, such as running dataflows, recipes, scripts, rules, or the like that may rely on output from the analytics, if the user database operations are on one schedule, while the analytics is on another schedule. User/source datasets may become out of sync and one or both environments may operate on stale data. One way to resolve this problem is to define triggers that, for example, monitor for changes to datasets (or other items of interest) by analytics or other activity and automatically run dataflows, recipes, or the like that are related to the changed datasets (or other items of interest).

Abstract: Techniques disclosed herein relate to managing notifications to a user associated with a computing device. The notifications correspond to a response to an indication of an exception condition on the computing device. The response to the exception condition includes a plurality of steps, including computer-implemented steps in which data objects output a plurality of notifications for the user. These notifications are processed by a notification choreographer and used to prepare a unified status communication. The unified status communication is output to the user and depicts information corresponding to a plurality of the notifications.

Abstract: Techniques are disclosed relating to creating an index for a database system. In one embodiment, a database system stores data within a plurality of fields in a data table, a subset of the data being associated with a particular one of the plurality of fields. The database system receives a request to index the data table based on the particular field and analyzes the subset of the data. In response to determining, based on the analyzing, that one or more duplicate values are present in the subset of data, the database system sets, in an index table having the particular field, an indication identifying which entries of the index table have a duplicate value for the particular field, and returns a response to the request that specifies the one or more duplicate values. In some embodiments, the response includes a user interface displaying one or more duplicates values.

Abstract: Disclosed are some implementations of systems, apparatus, methods and computer program products for facilitating version control for a client device. A server system may select one of two or more versions of a procedure based, at least in part, on a user profile. The server system may generate a message including a procedure name of the procedure, a version identifier identifying the selected version of the procedure, a set of computer-readable instructions corresponding to the selected version of the procedure, and a client directive pertaining to storing the procedure in a database. The server system may transmit the message to a client device associated with the user.

Abstract: A method for training parameters of a first domain adaptation model. The method includes evaluating a cycle consistency objective using a first task specific model associated with a first domain and a second task specific model associated with a second domain, and evaluating one or more first discriminator models to generate a first discriminator objective using the second task specific model. The one or more first discriminator models include a plurality of discriminators corresponding to a plurality of bands that corresponds domain variable ranges of the first and second domains respectively. The method further includes updating, based on the cycle consistency objective and the first discriminator objective, one or more parameters of the first domain adaptation model for adapting representations from the first domain to the second domain.

Abstract: Techniques for modifying a period of time that data, associated with a characteristic, transmitted via a communication platform is retained are described. A data retention rule can include a first period of time for retaining data transmitted via the communication platform, in association with an organization. The first user can additionally establish a specific data retention rule associated with data associated with a particular characteristic. The specific data retention rule can include an instruction to store communications including the particular characteristic for a second time period that is different from the first time period associated with the data retention rule. The communication platform can receive data from a second user computing device associated with the second user of the organization. Based on a determination that the data is associated with the characteristic, the communication platform can store the data according to the data retention rule specified for such data.

Abstract: A method of provisioning organization users in a multi-tenant database system includes receiving a request via a single sign-on protocol from an organization user to create a new multi-tenant database user account for access to the multi-tenant database system. The method retrieves rules that specify how to derive user permissions for access to the multi-tenant database system from stored user attributes of the organization user. The method continues with applying the rules to the stored user attributes to determine permissions for the users to access particular objects in the multi-tenant database system, and creating the new user account with the determined user permissions for access to the multi-tenant database system.

Abstract: Systems, devices, and techniques are disclosed for recommendations using a transformer neural network. User activity data including items and actions associated with users and a catalog including descriptions of the items may be received. User vectors for the users, item vectors for the items and action vectors the actions may be generated by applying singular vector decomposition to the user activity data. Sequence vectors may be generated based on item vectors and the action vectors. Transformer vectors may be generated by applying a text-to-text transferring transformer to descriptions of the items. Similarity vectors may be generated based on the transformer vectors. Merged vectors may be generated by merging the sequence vector, transformer vector, and similarity vector for items. A set of probabilities may be determined by inputting the user vector for the user, merged vectors for the items, and sequence vectors for the actions to a transformer neural network.

Abstract: Computing systems, for example, multi-tenant systems create data centers in a cloud platform using a cloud platform infrastructure language that is cloud platform independent. The system receives a cloud platform independent declarative specification describing a new datacenter to be created and a customization specification for customizing the data center. The system compiles the declarative specification along with the customization specification to generate a metadata representation of the data center. The metadata representation is used to generate a data center on a target cloud platform. Different customization specifications can be provided to generate different customized datacenters based on the same declarative specification. For example, the different customized data centers may implement different policies, for example, network policies, security policies, and so on.

Abstract: Systems and methods are described identify a database metric value associated with a database instance storing a dataset associated with a user system. A database issue is detected in view of a determination that the database metric value satisfies a condition. In response to satisfaction of the condition, a set of user action metrics associated with the user system is collected from one or more data monitoring systems. At least one notification communication is generated including at least a portion of the set of user action metrics and information identifying the database issue. The at least one notification communication is transmitted to a remediation execution system configured to execute, using the at least a portion of the set of user action metrics and information identifying the database issue, a remedial action in response to the database issue.

Abstract: Techniques and structures to facilitate identification, authentication, authorization and accounting of a computing device is disclosed. A set of supported algorithms for transmission during a secure shell (SSH) clear packet exchange is received and a cryptographic hash is performed on the set of algorithms to generate a unique fingerprint.

Abstract: Techniques are disclosed relating to contextual authentication across different applications based on user communications. In some embodiments, a user is preauthenticated to certain actions on a second application based on the user's communication via a first application. The user's communication via a first application provides contextual information that may be used to preauthenticate a request to perform an action on the second application. Contextual information may include the user's communication itself, communications characteristics that are determined from the user's communications, or both.

Abstract: In accordance with embodiments, there are provided mechanisms and methods for facilitating early detection and warning for system bottlenecks in an on-demand services environment according to one embodiment. In one embodiment and by way of example, a method includes detecting waits during processing of a query within a processing pipeline, wherein the waits include one or more of application-specific waits and database-specific waits; diagnosing the waits to identify a wait that has turned into a bottleneck; classifying one or more types of issues causing the wait to turn into the bottleneck; generating an alert having associated information detailing the issues based on the one or more types and a location of the wait within the processing pipeline; and transmitting the alert to facilitate correction activities.

Abstract: Systems and methods for verifying a firewall for a cloud provider. The method includes receiving by a timelord module configured with access to a plurality of HTTP attacks that incorporate random tokens, an updated policy ok signal that was generated by an external element. The timelord module responds by (a) loading a first HTTP attack with a first expected response that is either forbidden or accepted, the first HTTP attack including the random tokens in a form of a header key value parameter; (b) sending the first HTTP attack to the firewall; (c) comparing a response from the firewall to the first HTTP attack with the first expected response; and (d) incrementing the first HTTP attack and repeating (a) - (c) until the plurality of HTTP attacks has been sent; and deleting the random tokens after the plurality of HTTP attacks have been sent.

Abstract: Disclosed are some implementations of systems, apparatus, methods and computer program products for performing a decision-based multi-stage report generation process. Execution of a set of computer-readable instructions configurable to generate a report is initiated. During execution of a first subset of the set of computer-readable instructions associated with a first stage of report generation, at least a first template is applied. A result of the first stage of report generation is ascertained. It is determined whether the first stage of report generation is successfully completed based, at least in part, on application of a first condition to the result of the first stage of report generation. A first indicator of a data structure associated with the set of computer-readable instructions is updated such that the first indicator indicates whether the first stage of report generation is successfully completed.

Abstract: A system and method for rotating private encryption keys for tenants of a database system has been developed. First, three separate public-private encryption keys are generated for a tenant of the database system. The three separate private encryption keys for the tenant are then stored in cloud-based storage. A defined cadence is created to rotate the private encryption keys for the tenant. The three separate private encryption keys for the tenant are defined as a a past private key, a present private key and a future private key. Next, the public encryption key is stored for the tenant in a global tenant directory. The present private key and the public encryption key are retrieved to encrypt and decrypt data from the tenant. The three separate private encryption keys are rotated at the defined cadence, where the past private key is discarded, the present private key becomes a new past private key, the future private key becomes a new present private key, and a new future private key is generated.

Abstract: A method for meeting management that includes receiving an indicator of a user access of a meeting digest of a meeting, filtering communications of the user to identify communications received from a participant of the meeting, identifying at least one outstanding request from the participant or at least one unanswered communication from the participant, and generating a task for the meeting digest for the identified at least one outstanding request or the identified at least one unanswered communication.

Abstract: Disclosed are some implementations of systems, apparatus, methods and computer program products for processing consent information. A data consolidation system obtains, from each of two or more computing systems, a corresponding set of data objects such that two or more sets of objects are obtained. Each data object is associated with a corresponding individual and includes consent information indicating whether the individual consents to an action in relation to corresponding contact information of the individual. Consent information is extracted, for at least one individual, from the sets of data objects such that two or more sets of consent information are collected, the sets of consent information including a first set of consent information corresponding to a first computing system and a second set of consent information corresponding to a second computing system.

Abstract: A computing platform is configurable to cause identifying a first data object type of a computing platform, the first data object type identifying first data objects being included in a data model of an application, and identifying a second data object type of the computing platform, the second data object type identifying second data objects included in the data model, and the identifying of the second data object type defining a relationship between the second data object type and the first data object type. The computing platform is also configurable to cause generating a filter rule associated with the second data object type, the filter rule defining which of the plurality of second data objects may be associated with the plurality of first data objects, the filter rule being defined based, at least in part, on at least some of a plurality of attributes of the second data object type.

Abstract: A method for evaluating robustness of one or more target neural network models using natural typos. The method includes receiving one or more natural typo generation rules associated with a first task associated with a first input document type, receiving a first target neural network model, and receiving a first document and corresponding its ground truth labels. The method further includes generating one or more natural typos for the first document based on the one or more natural typo generation rules, and providing, to the first target neural network model, a test document generated based on the first document and the one or more natural typos as an input document to generate a first output. A robustness evaluation result of the first target neural network model is generated based on a comparison between the output and the ground truth labels.

Abstract: A system and method for customized scheduling of sources, including breaking down a source of content into at least two categories, including posts and engagements, and gathering content related to a specific source. A scheduler handles scheduling of posts and engagement for a single source and entities that are due to be crawled are sent to a scheduling queue, in which each content type for a source can have its own queue. A process points to the correct scheduler queue in order to request content to be crawled, attaches to the proper queue, processes requests, queries the social network for content, parses the response and sends any new data to be saved to the system.

Abstract: A set of data for training a machine learning system can be modified to improve its performance. An item of information can be transmitted. A message can be transmitted that includes an explanation of a determination, by the machine learning system, to transmit the item of information from among a plurality of items of information. A first set of data can have been used to train the machine learning system. A signal can be received that includes an indication of a usefulness of the message, to a user of a user device, in making a decision to perform an action based on a knowledge associated with the item of information. The first set of data can be modified, in response to a receipt of the signal, to produce a second set of data. The machine learning system can be caused to be trained using the second set of data.

Abstract: Message moderation is described herein. In an example, a message posted to a virtual space of a communication platform can be flagged for review by a reviewer (e.g., an administrator or other user permissioned to review messages). In some examples, such a reviewer can review a flagged message and determine one or more actions to be performed. Such actions can include removing the message from presentation via the communication platform, modifying presentation of the message via a user interface of the communication platform, replying to the message (e.g., to suggest taking the conversation offline or to another virtual space), disabling interaction with the message, and/or the like. Message moderation, as described herein, can streamline resolution of conversations that become out of hand and/or off topic.

Abstract: Technology for tracking changes to a database and providing the changes to a subscribing computing device. In an illustrative implementation, a method may involve subscribing a computing device to changes of a portion of a multi-tenant database and accessing a plurality of change events stored in a log of the multi-tenant database in parallel. The method may further involve storing the plurality of change events in a persistent data store separate from the multi-tenant database and processing the plurality of change events to create an ordered set of change events. The ordered set of change events may then be provided to the computing device that subscribed to the changes.

Abstract: A method for generating a neural network for detecting one or more objects in images includes generating one or more self-supervised proposal learning losses based on the one or more proposal features and corresponding proposal feature predictions. One or more consistency-based proposal learning losses are generated based on noisy proposal feature predictions and the corresponding proposal predictions without noise. A combined loss is generated using the one or more self-supervised proposal learning losses and one or more consistency-based proposal learning losses. The neural network is updated based on the combined loss.

Abstract: Systems and methods are provided for rendering components of a user interface (UI) of an application such that primitive child elements that correspond to child components of the UI can be rendered without instantiating the child components. Each child data object corresponds to a particular child component of a parent component and includes data for that particular child component. Child data objects can be augmented to include a simple render method for rendering structured data of the augmented child data objects. The parent component be rendered from its template by iteratively evaluating each child data object and checking a property of that child data object to determine whether it includes a simple render method, and if so, the template of the parent component can instruct the framework to use that simple render method to get an atom object and render one or more primitive child elements.

Abstract: Systems and methods are provided for securely sharing database records in the context of a conversation at a communication platform using a secure sharing service. The secure sharing service identifies an external system user identifier for a participant in the conversation at the communication platform using an identifier associated with the participant at the communication platform, identifies permissions associated with the data record at the external system, and identifies a subset of fields of the data record viewable by the participant using the external system user identifier. The secure sharing service obtains values for the identified subset of fields of the data record from the external computing system and automatically generates a shared data record message associated with the conversation at the communication platform that includes the obtained values for the identified subset of fields of the data record.

Abstract: Disclosed are some implementations of systems, apparatus, methods and computer program products for implementing a scalable computing system. The scalable computing system includes an intermediate system that facilitates communications between a core server system and a third-party system. The core server system processes a client request for a third-party service in association with a web page having a corresponding web address. The intermediate system communicates with the core server system to obtain a session token, and transmits the session token and web address to the third-party system. The third-party system may then access the web page via the web address using the session token.

Abstract: Disclosed are some implementations of systems, apparatus, methods and computer program products for implementing a scalable computing system. The scalable computing system includes an intermediate system that facilitates communications between a core server system and a third-party system. The core server system processes a client request for a third-party service in association with a web page having a corresponding web address. The intermediate system communicates with the core server system to obtain a session token, and transmits the session token and web address to the third-party system. The third-party system may then access the web page via the web address using the session token.

Abstract: Methods and systems are provided for processing a stream of incoming messages sent from a specific input message source and validating each incoming message of that stream before sending them to a specific target system.

Abstract: Among other things, embodiments of the present disclosure relate to detecting and mitigating errors associated with software pull requests (PRs). Other embodiments may be described or claimed.

Abstract: Disclosed are some implementations of systems, apparatus, methods and computer program products for implementing a customizable intent driven action triggering system. The system retrieves, for at least a first intent, a corresponding list of actions. The system provides, to a first client device associated with a first user account, a first graphical user interface (GUI) identifying the first intent, the list of actions, and for at least the first action in the list of actions, a corresponding user-selectable option configurable to indicate whether the first action is activated for the first intent in association with the first user account. The system processes a first request received from the first client device in association with the user-selectable option, where the first request indicates that the first action is activated for the first intent in association with the first user account.

Abstract: Systems, methods, and devices facilitate generation of application programming interfaces. Systems include a computing platform implemented using a server system, the computing platform being configurable to cause monitoring application programming interface (API) traffic associated with a client service, storing a representation of the API traffic in a database system, the representation including at least an API call identifier and metadata, and generating one or more API models based, at least in part, on the representation of the API traffic, the one or more API models being configured to represent a plurality of API interactions associated with the client service. The computing platform is further configurable to cause generating one or more API objects based, at least in part, on the API models, the one or more API objects being one or more components of a client service API.

Abstract: Systems and methods are provided for receiving at least a first query color, and searching an electronic catalog including a plurality of product images for the first query color to determine a similarity measure between the first query color and a product image of a plurality of product images. The similarity measure may be determined by determining a Euclidean distance between values in a three-dimensional color space for the first query color and a target color of the product image, and determining the similarity measure between the query color and the product image by determining a sum of the similarity measures from all target colors on the product image, weighted by the coverage of each target color. The search results may be transmitted based on the searching of the electronic catalog including the plurality of product images for the first query color.

Abstract: Systems, devices, and techniques are disclosed for translation of tenant identifiers. A record may be received. A value of a tenant identifier for the record may be determined from a key for the record or a scan descriptor. The value of the tenant identifier in the key for the record may be replaced with a new value for the tenant identifier. A bitmap stored in a record header of the record may be used to identify columns of the record that stored an encoded value of the tenant identifier. An encoded new value of the tenant identifier may be stored in columns identified by the bitmap stored in the record header that include an attribute indicating that tenant identifier translation is enabled.

Abstract: A system stores logs representing events that occur in the system based on executable instructions executed by the system, for example, by processes executing within the system or by applications. The system analyzes the logs to determine the root cause of the error or event that resulted in generation of the log. The system clusters logs to determine clusters of logs. The system analyzes logs of each cluster to determine a root cause of errors resulting in logs belonging to the cluster. For any new error log that is received, the system determines the cluster to which the error log belongs and takes action based on the root cause associated with the cluster, for example, sending an alert message or performing automatic remediation.

Abstract: A data-driven approach to network performance diagnosis and root-cause analysis is presented. By collecting and aggregating data attribute values across multiple components of a content delivery system and comparing against baselines for points of inspection, network performance diagnosis and root-cause analysis may be prioritized based on impact on content delivery. Recommended courses of action may be determined and provided based on the tracked network performance analysis at diagnosis points.

Abstract: Systems and methods are described for migrating a workflow from a source system to a target system. The systems and methods receive metadata defining a workflow configured for processing by the source system. A set of rules associated with transforming the metadata for processing by the target system are identified. A first rule is applied to the metadata to execute a first transformation of an element of the metadata. A second rule is applied to the metadata to execute a second transformation of a position of an element of the metadata. The systems and methods generate a transformed workflow including the first transformation and the second transformation. The transformed workflow is displayed via the target system.

Abstract: In accordance with embodiments, there are provided mechanisms and methods for security verification of communications to tenants of an on-demand database service. These mechanisms and methods for security verification of communications to tenants of an on-demand database service can enable embodiments to allow tenants to selectively implement security measures with respect to inbound communications, etc. The ability of embodiments to provide such feature may allow tenants to efficiently and effectively implement security measures for in-bound emails.

Abstract: A system may automatically generate a predictive machine learning model by automatically performing various processes based on an analysis of the data as well as metadata associated with the data. The system may accept a selection of data and a prediction field from the data. The system may automatically generate a set of features based on the data and may automatically remove certain features that cause inaccuracies in the model. The system may balance the data based on a representation rate of certain outcomes. The system may train and select a model based on several candidate models. The system may then perform the predictions based on the selected model and send an indication of the predictions to a user.

Abstract: Technologies are provided for supporting tenant customizations in a cloud computing platform. A standard application programming interface (API) can be defined to support a generic set of parameters that allow tenant-specified custom data to be passed to and from the standard API. The generic set of parameters allow the standard API to process requests and responses that include a payload that comprises tenant-specified custom data. The payload allows the tenant-specified custom data to be passed to and from the standard API. When a request is received at the cloud computing platform, a request payload of the request, that includes tenant-specified custom data, can be processed at the standard API, and a response can be sent from the cloud computing platform that includes a response payload that includes the tenant-specified custom data.

Abstract: Computer programming code may be executed via look ahead execution in a virtual machine. The computer programming code may include a first instruction to retrieve data stored in an on-demand computing services environment and a second instruction to transmit the data to a recipient. The first instruction, the second instruction, and the data may be evaluated to determine whether the execution of the computer programming code constitutes acceptable use of the on-demand computing services environment. When it is determined that the execution of the computer programming code does not constitute acceptable use of the on-demand computing services environment, further execution of the computer programming code may be halted.

Abstract: Systems, methods, and computer-readable media for asynchronous (async) querying are described. In embodiments, a system may convert a user-issued query into a distributed execution instruction set (DEIS), and issue the DEIS to data stores that may have various database structures. The system may obtain database objects from the data stores, and store a result set indicating the obtained database objects in a location specified by the user-issued query. The system may also provide mechanisms to allow users to view progress of their async query jobs and/or cancel ongoing async query jobs. Other embodiments may be described and/or claimed.