Abstract: A computing device provides enhancement of the capabilities of text messaging applications that execute on user devices. The computing device includes a processor that receives a text message via a network from a user device, the text message including a character representation of a product bundle of a merchant. The processor determines bundle data for the product bundle by referencing a database using the character representation. The processor provides one or more text messages via the network to the user device with transaction data including the bundle data, payment data, and shipping data. The processor receives a text message via the network from the user device confirming the transaction data. The user may use text commands presented by the computing device or natural language conversation in the text messages to the computing device to modify the transaction data and perform other ecommerce actions.

Abstract: Some embodiments provide a GUI for a document reader application for viewing videos in video document panes. In some embodiments, the GUI determines whether to play the video inline within a document pane based on the size of the video document pane. In some embodiments, when a video is being played within a video document pane, a user can select the body of the video document pane to show the full content of the video document. Some embodiments provide a GUI that, when a user scrolls a video off-screen while the videos are playing inline in the document panes, pauses or stops the playback of the video and provides an indication that the playback is being stopped. In some embodiments, the indication is a fading of the video or of audio associated with the video, as the video document is scrolled off-screen.

Abstract: Some embodiments provide a GUI for a document reader application that displays an aggregated feed with sections for different groups of personalized documents. Some embodiments provide a method for arranging documents within the different sections and for ordering the different sections within the aggregated feed. In some embodiments, the groups are dynamically generated at a device based on content (e.g., tags) of the documents.

Abstract: Some embodiments provide a GUI for a document reader application for viewing videos in video document panes. In some embodiments, the GUI determines whether to play the video inline within a document pane based on the size of the video document pane. In some embodiments, when a video is being played within a video document pane, a user can select the body of the video document pane to show the full content of the video document. Some embodiments provide a GUI that, when a user scrolls a video off-screen while the videos are playing inline in the document panes, pauses or stops the playback of the video and provides an indication that the playback is being stopped. In some embodiments, the indication is a fading of the video or of audio associated with the video, as the video document is scrolled off-screen.

Abstract: A method and a system are presented in which federated domains interact within a federated environment. Domains within a federation can initiate federated single-sign-on operations for a user at other federated domains. A point-of-contact server within a domain relies upon a trust proxy within the domain to manage trust relationships between the domain and the federation. Trust proxies interpret assertions from other federated domains as necessary. Trust proxies may have a trust relationship with one or more trust brokers, and a trust proxy may rely upon a trust broker for assistance in interpreting assertions. When a user is provisioned at a particular federated domain, the federated domain can provision the user to other federated domains within the federated environment. A provision operation may include creating or deleting an account for a user, pushing updated user account information including attributes, and requesting updates on account information including attributes.

Abstract: Access Control Lists control permitted actions on protected network computer system resources by providing an access control policy associated with the requested protected system resource containing a permission list of permitted identities and at least one action group tag with associated action indicators; reusing a finite quantity of action indicators among a plurality of action group tags to control a number of unique permissions less than or equal to the product of the quantity of allowable action indicators and a quantity of allowable action group tags; evaluating the permission list according to a specific permission definition associated with the action group tag, the permission definition providing a correlation between members of a set of action indicators; and granting authorization to perform actions on the requested protected system resource to the requesting user if the access control policy permission list includes an appropriate action indicator correlated to an action group tag.

Abstract: A method is presented for obtaining information from a client for the benefit of a server using a particular communication protocol that the server does not implement. A primary server receives a client-generated request, and the primary server sends a first request to a secondary server as part of the processing of the client-generated request. While processing the first request, the secondary server determines a need for data obtainable from a client application that supports user interaction using a communication protocol for which the secondary server is not configured to implement. The secondary server sends a second request to the primary server for obtaining data that results from using the communication protocol. The secondary server subsequently receives the resulting data and continues to process the first request using the resulting data, after which the secondary server returns a response for the first request to the primary server.

Abstract: Access Control Lists (ACLs) are used to describe the permitted actions (permissions) on protected network computer system resources or objects associated with an client or user identity. An identity may be an individual user or group of users. The actions are used to represent the different access methods available on a particular projected object or resource. A new action grouping mechanism is provided which tags each action with an action group name. The grouping of actions facilitates a larger permission set to be defined in an ACL, whereas action permission indicators can be reused for unique action definitions within various action groups. This effectively extends the finite total number of permissions available within a security system, allows a more descriptive and extensible permission mechanism in an Access Control List, as well as aiding in the simplification of management and definition of security policies.

Abstract: An administration model is provided that uses access control lists to define permissions for users and groups of users. The model identifies a number of objects to be administered. Associated with each of these objects is a set of administrative operations that can be performed on the object. For each of these operations a permission in an access control list entry is defined. The protected resources are arranged in a hierarchical fashion and an access control list can be associated with any point in the hierarchy. The access control list provides fine-grained control over the protected resources. At the time an administrator requests to perform an operation, the administrator's identification is used to look up the prevailing access control list to determine whether the operation is permitted.

Abstract: Access Control Lists (ACLs) are used to describe the permitted actions (permissions) on protected network computer system resources or objects associated with an client or user identity. An identity may be an individual user or group of users. The actions are used to represent the different access methods available on a particular projected object or resource. A new action grouping mechanism is provided which tags each action with an action group name. The grouping of actions facilitates a larger permission set to be defined in an ACL, whereas action permission indicators can be reused for unique action definitions within various action groups. This effectively extends the finite total number of permissions available within a security system, allows a more descriptive and extensible permission mechanism in an Access Control List, as well as aiding in the simplification of management and definition of security policies.

Abstract: An administration model is provided that uses access control lists to define permissions for users and groups of users. The model identifies a number of objects to be administered. Associated with each of these objects is a set of administrative operations that can be performed on the object. For each of these operations a permission in an access control list entry is defined. The protected resources are arranged in a hierarchical fashion and an access control list can be associated with any point in the hierarchy. The access control list provides fine-grained control over the protected resources. At the time an administrator requests to perform an operation, the administrator's identification is used to look up the prevailing access control list to determine whether the operation is permitted.