Abstract: Clustering-based machine learning is utilized to generate and update permissions data in a computing system. The computing system logs permissions-related user activity for users of the system over time. Feature vectors are generated for the users based on the logs, where each feature corresponds to a specific permission or permission-related operation of the system. A clustering-based learning algorithm analyzes the feature vectors and generates clusters of similar users based on their feature vectors. The permissions of the users may be updated to reflect attributes of the clusters to which they were assigned. For example, the clusters may be utilized to seed and/or update access control groups or other permissions-related user groups in the system. Or, some or all permissions not used by any users within a cluster over a recent period of time may be automatically removed from any user in the cluster.

Abstract: Systems and methods for providing a custom action for an information post are described. In one embodiment, data for generating a user interface component for display at a client machine may be transmitted from a server to the client machine. The user interface component displaying one or more information posts may be capable of being generated in accordance with first computing programming language instructions provided by a first entity. Each information post may include information relating to a record stored on a storage medium accessible to the server. Selected ones of the information posts may have associated therewith a custom action activation mechanism for activating a custom action relating to the associated information post. The custom action activation mechanism may be capable of being generated in accordance with second computer programming language instructions provided by a second entity.

Abstract: A method and a system for enabling multiple log record consumers to comply with regulations and requirements regarding privacy and handling of data are described. A determination, based on a log record format being of a first of the log record types, that a first field from a raw log record is to be tokenized based on a first tokenization strategy of multiple tokenization strategies in the first log record type, is performed. Each one of the tokenization strategies identifies a tokenization mechanism from tokenization mechanisms for generating a token from a raw value to enable compliance with a set of regulations and requirements regarding privacy and the handling of data. For a first raw value in the first field a first token is generated that is an anonymized representation of the first raw value using a tokenization mechanism identified by the first tokenization strategy in the log record type.

Abstract: Clustering-based machine learning is utilized to generate and update permissions data in a computing system. The computing system logs permissions-related user activity for users of the system over time. Feature vectors are generated for the users based on the logs, where each feature corresponds to a specific permission or permission-related operation of the system. A clustering-based learning algorithm analyzes the feature vectors and generates clusters of similar users based on their feature vectors. The permissions of the users may be updated to reflect attributes of the clusters to which they were assigned. For example, the clusters may be utilized to seed and/or update access control groups or other permissions-related user groups in the system. Or, some or all permissions not used by any users within a cluster over a recent period of time may be automatically removed from any user in the cluster.

Abstract: Systems and methods for providing a custom action for an information post are described. In one embodiment, data for generating a user interface component for display at a client machine may be transmitted from a server to the client machine. The user interface component displaying one or more information posts may be capable of being generated in accordance with first computing programming language instructions provided by a first entity. Each information post may include information relating to a record stored on a storage medium accessible to the server. Selected ones of the information posts may have associated therewith a custom action activation mechanism for activating a custom action relating to the associated information post. The custom action activation mechanism may be capable of being generated in accordance with second computer programming language instructions provided by a second entity.

Abstract: Systems and methods for providing a custom action for an information post are described. In one embodiment, data for generating a user interface component for display at a client machine may be transmitted from a server to the client machine. The user interface component displaying one or more information posts may be capable of being generated in accordance with first computing programming language instructions provided by a first entity. Each information post may include information relating to a record stored on a storage medium accessible to the server. Selected ones of the information posts may have associated therewith a custom action activation mechanism for activating a custom action relating to the associated information post. The custom action activation mechanism may be capable of being generated in accordance with second computer programming language instructions provided by a second entity.

Abstract: A method and a system for enabling multiple log record consumers to comply with regulations and requirements regarding privacy and handling of data are described. A determination, based on a log record format being of a first of the log record types, that a first field from a raw log record is to be tokenized based on a first tokenization strategy of multiple tokenization strategies in the first log record type, is performed. Each one of the tokenization strategies identifies a tokenization mechanism from tokenization mechanisms for generating a token from a raw value to enable compliance with a set of regulations and requirements regarding privacy and the handling of data. For a first raw value in the first field a first token is generated that is an anonymized representation of the first raw value using a tokenization mechanism identified by the first tokenization strategy in the log record type.

Abstract: Threat detection in a multi-organizational environment. Attribute data corresponding to accesses to a multi-organizational environment and entity data corresponding to accesses to the multi-organizational environment are maintained. A graph based on the attribute data and the entity data where graph edges represent a relationship between an attribute and an entity is generated. Subsequent access are compared to the graph to determine if the subsequent access corresponds to a new relationship. The subsequent access is allowed if the subsequent access does not correspond to a new relationship. The subsequent access further analyzed if the subsequent access corresponds to a new, unexpected relationship.

Abstract: Threat detection in a multi-organizational environment. Attribute data corresponding to accesses to a multi-organizational environment and entity data corresponding to accesses to the multi-organizational environment are maintained. A graph based on the attribute data and the entity data where graph edges represent a relationship between an attribute and an entity is generated. Subsequent access are compared to the graph to determine if the subsequent access corresponds to a new relationship. The subsequent access is allowed if the subsequent access does not correspond to a new relationship. The subsequent access further analyzed if the subsequent access corresponds to a new, unexpected relationship.

Abstract: Disclosed are methods, apparatus, systems, and computer-readable storage media for modifying permission sets and validating permission set assignments to users. In some implementations, a computing device receives a request to create a permission set containing one or more permissions and assign the permission set to a first user. The first user is associated with a first user constraint that defines a first group of permissions available to the first user. The computing device may determine that the permission set to be assigned to the first user does not violate the first user constraint, and may assign the permission set to the first user.

Abstract: Systems and methods for implementing customized drop-down menus in user interface displays. Drop-down menus include one or more selection options and a table having multiple fields. Drop-down menu items are particularly useful for assisting a user with assigning information synchronized into a target database from one database system, such as an Outlook file, to objects in the target database system, such as a multi-tenant database system as well as providing suggestions to the user from search results when they may want to choose one of those results or perform a different action altogether.

Abstract: Systems and methods for implementing customized drop-down menus in user interface displays. Drop-down menus include one or more selection options and a table having multiple fields. Drop-down menu items are particularly useful for assisting a user with assigning information synchronized into a target database from one database system, such as an Outlook file, to objects in the target database system, such as a multi-tenant database system as well as providing suggestions to the user from search results when they may want to choose one of those results or perform a different action altogether.

Abstract: Systems and methods for implementing customized drop-down menus in user interface displays. Drop-down menus include one or more selection options and a table having multiple fields. Drop-down menu items are particularly useful for assisting a user with assigning information synchronized into a target database from one database system, such as an Outlook file, to objects in the target database system, such as a multi-tenant database system as well as providing suggestions to the user from search results when they may want to choose one of those results or perform a different action altogether.

Abstract: Systems and methods for providing a custom action for an information post are described. In one embodiment, data for generating a user interface component for display at a client machine may be transmitted from a server to the client machine. The user interface component displaying one or more information posts may be capable of being generated in accordance with first computing programming language instructions provided by a first entity. Each information post may include information relating to a record stored on a storage medium accessible to the server. Selected ones of the information posts may have associated therewith a custom action activation mechanism for activating a custom action relating to the associated information post. The custom action activation mechanism may be capable of being generated in accordance with second computer programming language instructions provided by a second entity.

Abstract: A mobile backhaul inter-mesh communication point forms an interface between a wireless mesh network on a first level and a wireless mesh network on a second, higher bandwidth, level. The two wireless networks are differentiated, e.g., by causing the mesh networks to be formed using different spectra, protocols or coding, or antennae. The mobile intra-mesh communication point functions as an access point in the lower level mesh network and as a relay point in the upper level mesh network. Utilizing mobile inter-mesh communication points facilitates deployment of wireless network access points while enabling the location of access points to follow the concentration of network users. Mobile inter-mesh communication points may be deployed in personal vehicles such as cars, trucks, and motorcycles, public transportation vehicles such as busses, trains, and aircraft, emergency vehicles such as fire trucks and ambulances, and many other types of vehicles.

Abstract: Systems and methods for providing a custom action for an information post are described. In one embodiment, data for generating a user interface component for display at a client machine may be transmitted from a server to the client machine. The user interface component displaying one or more information posts may be capable of being generated in accordance with first computing programming language instructions provided by a first entity. Each information post may include information relating to a record stored on a storage medium accessible to the server. Selected ones of the information posts may have associated therewith a custom action activation mechanism for activating a custom action relating to the associated information post. The custom action activation mechanism may be capable of being generated in accordance with second computer programming language instructions provided by a second entity.

Abstract: A mobile backhaul inter-mesh communication point forms an interface between a wireless mesh network on a first level and a wireless mesh network on a second, higher bandwidth, level. The two wireless networks are differentiated, e.g., by causing the mesh networks to be formed using different spectra, protocols or coding, or antennae. The mobile intra-mesh communication point functions as an access point in the lower level mesh network and as a relay point in the upper level mesh network. Utilizing mobile inter-mesh communication points facilitates deployment of wireless network access points while enabling the location of access points to follow the concentration of network users. Mobile inter-mesh communication points may be deployed in personal vehicles such as cars, trucks, and motorcycles, public transportation vehicles such as busses, trains, and aircraft, emergency vehicles such as fire trucks and ambulances, and many other types of vehicles.

Abstract: Methods and systems are provided for associating objects in a database. An exemplary method involves identifying one or more objects in the database that are likely to be related to a first object in the database that is based on data obtained from a local application associated with a user and displaying the identified objects on a client device associated with the user. In exemplary embodiments, the identified objects are displayed in response to selection of a graphical user interface element enabling indication of a second object from among the one or more objects, wherein the first object is associated with the second object in the database after receiving indication of the second object. In one or more exemplary embodiments, the database is a multi-tenant database in a multi-tenant system providing instances of a virtual application to multiple tenants.

Abstract: In accordance with embodiments, there are provided mechanisms and methods for creating an application within a system. These mechanisms and methods for creating an application within a system can enable improved application diversity and productivity, enhanced customer experience, increased user flexibility, etc.

Abstract: In accordance with embodiments, there are provided mechanisms and methods for creating an application within a system. These mechanisms and methods for creating an application within a system can enable improved application diversity and productivity, enhanced customer experience, increased user flexibility, etc.