Abstract: A method and system for defining and executing a workflow are described. the method comprises presenting, on a first section of a user interface (UI), a plurality of UI components associated with a plurality of tasks to be performed, where each UI component is associated with one task. The method further comprises, in response to one or more UI components of the plurality of UI components associated with one or more tasks of the plurality of tasks being moved from the first section of the UI to a second section of the UI, dynamically creating the workflow based on the one or more UI components and an order in which the one or more UI components being positioned in the second section of the UI, and executing the workflow to perform the one or more tasks of the plurality of tasks.

Abstract: A method and apparatus for managing and using permissions in a distributed services system is described. The method may include receiving, by a service system of the distributed services system, a definition of a permissions data structure and a mapping of permission positions from a permissions bitmap log to permissions in the permissions data structure. The method may also include receiving, by the service system, a service-to-service message that comprises a request of the service system and an access token having one or more permissions bitmap logs associated with the message. Furthermore, the method may include determining, by the service system, a set of permissions that are within an intersection of permissions between the one or more permissions bitmap logs associated with the message and the definition of the permissions data structure, and then processing the request based on the determined set of permissions.

Abstract: Presented herein are systems and methods of authenticating clients to access data via proxy layers. A gateway on a proxy layer may receive a request from a client to access data in a compartment on the database layer. The request may include a token based at least on an encryption of an identifier of the compartment responsive to successful authentication of the request at an application layer. The gateway may, responsive to identifying the identifier as referencing the compartment, determine that the client is authorized to access the data in the compartment on the database layer through the proxy layer. The gateway may select a permission for the client to access the compartment through the proxy layer based on the context of the request. The gateway may generate an indication that the client is authorized to access the data in accordance with the permission.

Abstract: A method and system for defining and executing a workflow are described. the method comprises presenting, on a first section of a user interface (UI), a plurality of UI components associated with a plurality of tasks to be performed, where each UI component is associated with one task. The method further comprises, in response to one or more UI components of the plurality of UI components associated with one or more tasks of the plurality of tasks being moved from the first section of the UI to a second section of the UI, dynamically creating the workflow based on the one or more UI components and an order in which the one or more UI components being positioned in the second section of the UI, and executing the workflow to perform the one or more tasks of the plurality of tasks.

Abstract: Presented herein are systems and methods of authenticating clients to access data via proxy layers. A gateway on a proxy layer may receive a request from a client to access data in a compartment on the database layer. The request may include a token based at least on an encryption of an identifier of the compartment responsive to successful authentication of the request at an application layer. The gateway may, responsive to identifying the identifier as referencing the compartment, determine that the client is authorized to access the data in the compartment on the database layer through the proxy layer. The gateway may select a permission for the client to access the compartment through the proxy layer based on the context of the request. The gateway may generate an indication that the client is authorized to access the data in accordance with the permission.

Abstract: Presented herein are systems and methods of authenticating clients to access data via proxy layers. A gateway on a proxy layer may receive a request from a client to access data in a compartment on the database layer. The request may include a token based at least on an encryption of an identifier of the compartment responsive to successful authentication of the request at an application layer. The gateway may, responsive to identifying the identifier as referencing the compartment, determine that the client is authorized to access the data in the compartment on the database layer through the proxy layer. The gateway may select a permission for the client to access the compartment through the proxy layer based on the context of the request. The gateway may generate an indication that the client is authorized to access the data in accordance with the permission.

Abstract: A method and apparatus for managing and using permissions in a distributed services system is described. The method may include receiving, by a service system of the distributed services system, a definition of a permissions data structure and a mapping of permission positions from a permissions bitmap log to permissions in the permissions data structure. The method may also include receiving, by the service system, a service-to-service message that comprises a request of the service system and an access token having one or more permissions bitmap logs associated with the message. Furthermore, the method may include determining, by the service system, a set of permissions that are within an intersection of permissions between the one or more permissions bitmap logs associated with the message and the definition of the permissions data structure, and then processing the request based on the determined set of permissions.

Abstract: A method and system for defining and executing a workflow are described. the method comprises presenting, on a first section of a user interface (UI), a plurality of UI components associated with a plurality of tasks to be performed, where each UI component is associated with one task. The method further comprises, in response to one or more UI components of the plurality of UI components associated with one or more tasks of the plurality of tasks being moved from the first section of the UI to a second section of the UI, dynamically creating the workflow based on the one or more UI components and an order in which the one or more UI components being positioned in the second section of the UI, and executing the workflow to perform the one or more tasks of the plurality of tasks.