Abstract: Methods for tracking and managing a device that connects to a database system, including connecting to a web application at least partially running on the database system, are disclosed. In some embodiments, the device may be identified by a fingerprint or unique device identifier (ID) formed from various vectors that correspond to device specific attributes or characteristics. The fingerprint or unique device ID may be compared to a fingerprint or device ID stored on the database system associated with a user's access credentials to determine a match percentage. Further access by the device to the database system may depend upon whether the match percentage exceeds a predetermined threshold. Device access to the database system may be tied to the fingerprint or unique device ID.

Abstract: Application security assessment is described. A system identifies a first security configuration and a second security configuration associated with an application. The system calculates a security score based on a comparison of the first security configuration to a first baseline security setting and a comparison of the second security configuration to a second baseline security setting. The system generates a security report associated with the application that includes the security score and outputs the security report.

Abstract: Methods for tracking and managing a device that connects to a database system, including connecting to a web application at least partially running on the database system, are disclosed. In some embodiments, the device may be identified by a fingerprint or unique device ID formed from various vectors that correspond to device specific attributes or characteristics. The fingerprint or unique device ID may be compared to a fingerprint or device ID stored on the database system associated with a user's access credentials to determine a match percentage. Further access by the device to the database system may depend upon whether the match percentage exceeds a predetermined threshold. Device access to the database system may be tied to the fingerprint or unique device ID.

Abstract: A computer implemented method for delegating administration duties using application containers may include associating, by a database system, a custom object to a delegated administrator; associating, by the database system, an application container with a custom object; and enabling, by the database system, the delegated administrator to manage the custom object based on permissions included in the application container, wherein the application container includes a subset of permission included in an application permission.

Abstract: Disclosed are examples of systems, apparatus, methods and computer program products for providing user-customizable permissions governing user access to computing resources in a computing system. For example, a database storing data objects identifying permissions of users, sets of the permissions, and users can be maintained. One or more fields can be displayed on a display of a user device. The one or more fields can be configured to receive input to perform one or more operations. Input can be received from a user via the user interface on the display of the user device. One or more operations can be performed. The database can be updated such that the data objects identify a custom permission or a permission set to which a custom permission has been assigned.

Abstract: Application security assessment is described. A system identifies a first security configuration and a second security configuration associated with an application. The system calculates a security score based on a comparison of the first security configuration to a first baseline security setting and a comparison of the second security configuration to a second baseline security setting. The system generates a security report associated with the application that includes the security score and outputs the security report.

Abstract: Disclosed are examples of systems, apparatus, methods and computer program products for providing user-customizable permissions governing user access to computing resources in a computing system. For example, a database storing data objects identifying permissions of users, sets of the permissions, and users can be maintained. One or more fields can be displayed on a display of a user device. The one or more fields can be configured to receive input to perform one or more operations. Input can be received from a user via the user interface on the display of the user device. One or more operations can be performed. The database can be updated such that the data objects identify a custom permission or a permission set to which a custom permission has been assigned.

Abstract: A computer implemented method for activating assignments of permission sets may include enabling, by a server computing system, assignment of one or more permission sets to a user, wherein access to a computing resource associated with the one or more permission sets is blocked until the assignment of the one or more permission sets is activated; detecting, by the server computing system, a start of a first user session associated with the user; and activating, by the server computing system, the assignment of the one or more permission sets based on the detecting of the start of the first user session and based on one or more of the user and the first user session satisfying one or more qualification requirements.

Abstract: Disclosed are examples of systems, apparatus, methods and computer program products for providing user-customizable permissions governing user access to computing resources in a computing system. For example, a database storing data objects identifying permissions of users, sets of the permissions, and users can be maintained. One or more fields can be displayed on a display of a user device. The one or more fields can be configured to receive input to perform one or more operations. Input can be received from a user via the user interface on the display of the user device. One or more operations can be performed. The database can be updated such that the data objects identify a custom permission or a permission set to which a custom permission has been assigned.

Abstract: A computer implemented method for delegating administration duties using application containers may include associating, by a database system, a custom object to a delegated administrator; associating, by the database system, an application container with a custom object; and enabling, by the database system, the delegated administrator to manage the custom object based on permissions included in the application container, wherein the application container includes a subset of permission included in an application permission.

Abstract: Disclosed are examples of systems, apparatus, methods and computer program products for providing user-customizable permissions governing user access to computing resources in a computing system. For example, a database storing data objects identifying permissions of users, sets of the permissions, and users can be maintained. One or more fields can be displayed on a display of a user device. The one or more fields can be configured to receive input to perform one or more operations. Input can be received from a user via the user interface on the display of the user device. One or more operations can be performed. The database can be updated such that the data objects identify a custom permission or a permission set to which a custom permission has been assigned.