Abstract: A method for multi-tenant authorization includes receiving, from a user account of a multi-tenant computer system, a request for a resource of the multi-tenant computer system. The method further includes determining whether the resource corresponds to a local resource that is local to the user account or to a nonlocal resource that is not local to the user account. The method further includes identifying, by a processing device, a local access control policy of the user account, corresponding to the local resource, or a visiting access control policy of the user account, corresponding to the nonlocal resource. The method further includes determining that the identified access control policy of the user account comprises an access permission corresponding to the resource. The method further includes controlling access to the resource of the multi-tenant computer system based on the access permission.

Abstract: A method may include receiving, from a client device, a request for a resource of a computer system, determining one or more roles of a user associated with the client device, and determining one or more attributes of the user. The method may include determining one or more attributes of the resource and determining an access permission based on the one or more roles of the user and the resource. The method may include generating, by a processing device, a modified access permission by modifying the access permission based on at least one of: the one or more attributes of the user or the one or more attributes of the resource and providing or denying access to the resource of the computer system based on the modified access permission.

Abstract: A method for multi-tenant authorization includes receiving, from a user account of a multi-tenant computer system, a request for a resource of the multi-tenant computer system. The method further includes determining whether the resource corresponds to a local resource that is local to the user account or to a nonlocal resource that is not local to the user account. The method further includes identifying, by a processing device, a local access control policy of the user account, corresponding to the local resource, or a visiting access control policy of the user account, corresponding to the nonlocal resource. The method further includes determining that the identified access control policy of the user account comprises an access permission corresponding to the resource. The method further includes controlling access to the resource of the multi-tenant computer system based on the access permission.

Abstract: A method may include receiving a request for a resource of a computer system. The method may include determining one or more attributes of a user associated with the request, wherein the one or more attributes are based on a status of the user in an organization hierarchy, the organization hierarchy comprising one or more sub organizations corresponding to the user. The method may include determining that the request comprises one or more attribute names. The method may include: in response to receiving the request, generating, by a processing device, an access permission based on the organization hierarchy corresponding to the user and the one or more attribute names, by replacing the one or more attribute names with the one or more attributes. The method may include providing or denying access to the resource of the computer system based on the access permission.

Abstract: A method may include receiving, from a client device, a request for a resource of a computer system, determining one or more roles of a user associated with the client device, and determining one or more attributes of the user. The method may include determining one or more attributes of the resource and determining an access permission based on the one or more roles of the user and the resource. The method may include generating, by a processing device, a modified access permission by modifying the access permission based on at least one of: the one or more attributes of the user or the one or more attributes of the resource and providing or denying access to the resource of the computer system based on the modified access permission.

Abstract: A communication unit (105) includes a communication interface, for transmitting and receiving communications when operably connected to a first communication network; and a processor cooperatively operable with the communication interface. Responsive to receipt of an utterance, the communication unit (105) can perform a fetch (109) over the communication interface and can transmit a first message (107) having the utterance over the communication interface. The communication unit (105) can receive a second message (113) having a result (111) of a recognition of the utterance from the communication interface in response to the fetch (109).

Abstract: A voice browser dialog enabler for multimodal dialog uses a multimodal markup document with fields have markup-based forms associated with each field and defining fragments. A voice browser driver resides on a communication device and provides the fragments and identifiers that identify the fragments. A voice browser implementation resides on a remote voice server and receives the fragments from the driver and downloads a plurality of speech grammars. Input speech is matched against those speech grammars associated with the corresponding identifiers received in a recognition request from the voice browser driver.

Abstract: A method and apparatus maintains, during non-session conditions and on a per user basis, concurrent multimodal session status information of user agent programs configured for different concurrent modality communication during the same session, and re-establish a concurrent multimodal session in response to accessing the concurrent multimodal session status information.

Abstract: A method and apparatus (110) for sender controllable modalities includes the step of generating a communication command (108). The method and apparatus further includes generating a priority command (110) wherein the priority command includes a modality alert command. The priority command (108) may be any suitable command indicating a level of priority as it relates to the communication command (110). The method and apparatus further includes thereupon transmitting the communication command and the priority command (112) to the recipient device (120). The method and apparatus further includes the recipient device (120) verifying the sender device (100) and performing an internal verification (124) of whether the sender device (100) has the ability to override the internal modality setting and to verify if the priority level requests overriding the internal modality setting.

Abstract: A multimodal network element facilitates concurrent multimodal communication sessions through differing user agent programs on one or more devices. For example, a user agent program communicating in a voice mode, such as a voice browser in a voice gateway that includes a speech engine and call/session termination, is synchronized with another user agent program operating in a different modality, such as a graphical browser on a mobile device. The plurality of user agent programs are operatively coupled with a content server during a session to enable concurrent multimodal interaction.

Abstract: A voice browser dialog enabler for multimodal dialog uses a multimodal markup document with fields have markup-based forms associated with each field and defining fragments. A voice browser driver resides on a communication device and provides the fragments and identifiers that identify the fragments. A voice browser implementation resides on a remote voice server and receives the fragments from the driver and downloads a plurality of speech grammars. Input speech is matched against those speech grammars associated with the corresponding identifiers received in a recognition request from the voice browser driver.

Abstract: A method and apparatus, during a session, analyze fetched modality specific instructions for at least one modality associated with a first user agent program to determine if the modality specific instructions include a concurrent multimodal tag (CMMT); and if detected, provide modality specific instructions for at least a second user agent program operating in a different modality, based on the concurrent multimodal tag. Synchronization of output from the first and second user agent programs is carried out based on the modality specific instructions.

Abstract: A multimodal network element facilitates concurrent multimodal communication sessions through differing user agent programs on one or more devices. For example, a user agent program communicating in a voice mode, such as a voice browser in a voice gateway that includes a speech engine and call/session termination, is synchronized with another user agent program operating in a different modality, such as a graphical browser on a mobile device. The plurality of user agent programs are operatively coupled with a content server during a session to enable concurrent multimodal interaction.

Abstract: A method and apparatus maintains, during non-session conditions and on a per user basis, concurrent multimodal session status information of user agent programs configured for different concurrent modality communication during the same session, and re-establish a concurrent multimodal session in response to accessing the concurrent multimodal session status information.