Abstract: The disclosure provides an approach for inter-network resource connectivity. Embodiments include receiving, by a forward proxy of a transporter server, from a device in a source network, a request directed to a resource in a target network. Embodiments include forwarding the request to a reverse proxy of the transporter server, wherein the forward proxy and the reverse proxy of the transporter server are not in the target network. Embodiments include transmitting the request from the reverse proxy to a transporter client in the target network via a first tunnel channel. Embodiments include transmitting the request from the transporter client to the resource in the target network via a second tunnel channel. Embodiments include returning a response to the device based on the request via the second tunnel channel, the first tunnel channel, the reverse proxy, and the forward proxy.

Abstract: An example method of managing rights in a cloud computing system includes: creating a role template having a role template set of rights to resources in the cloud computing system; assigning a tenant set of rights to the resources to each of a plurality of tenants of the cloud computing system, respectively; and creating a role instance for each respective tenant based on the role template and assigning the role instance to each respective tenant, where the role instance is linked to the role template in the cloud computing system and where the role instance includes a role instance set of rights that includes an intersection of the role template set of rights and the tenant set of rights for the respective tenant.

Abstract: An example method of managing rights in a cloud computing system includes: creating a role template having a role template set of rights to resources in the cloud computing system; assigning a tenant set of rights to the resources to each of a plurality of tenants of the cloud computing system, respectively; and creating a role instance for each respective tenant based on the role template and assigning the role instance to each respective tenant, where the role instance is linked to the role template in the cloud computing system and where the role instance includes a role instance set of rights that includes an intersection of the role template set of rights and the tenant set of rights for the respective tenant.

Abstract: An example method of managing rights in a cloud computing system includes: creating a role template having a role template set of rights to resources in the cloud computing system; assigning a tenant set of rights to the resources to each of a plurality of tenants of the cloud computing system, respectively; and creating a role instance for each respective tenant based on the role template and assigning the role instance to each respective tenant, where the role instance is linked to the role template in the cloud computing system and where the role instance includes a role instance set of rights that includes an intersection of the role template set of rights and the tenant set of rights for the respective tenant.

Abstract: The present application is directed to a distributed-services component of a distributed system that facilitates multi-cloud aggregation using a cloud-connector server and cloud-connector nodes that cooperate to provide services that are distributed across multiple clouds. These services include the transfer of virtual-machine containers, or workloads, between two different clouds and remote management interfaces.

Abstract: An example method for assigning rights to utilize cloud resources associated with a service provider's computing hardware is provided. The example method can include defining a rights package including multiple rights pertaining to utilization of the cloud resources. The rights package can be assigned across multiple tenants of the service provider. The example method can also include defining a global role that includes potential rights, where the global role is assignable to individual tenant users of the tenant. The global roles can be made available to multiple tenants using the service provider. The method can further include provisioning filtered rights to utilize the cloud resources to a tenant user of the tenant, the tenant user being assigned the global role. The filtered rights can include rights present in both the potential rights defined for the global role and the rights defined for the rights package.

Abstract: An example method for assigning rights to utilize cloud resources associated with a service provider's computing hardware is provided. The example method can include defining a rights package including multiple rights pertaining to utilization of the cloud resources. The rights package can be assigned across multiple tenants of the service provider. The example method can also include defining a global role that includes potential rights, where the global role is assignable to individual tenant users of the tenant. The global roles can be made available to multiple tenants using the service provider. The method can further include provisioning filtered rights to utilize the cloud resources to a tenant user of the tenant, the tenant user being assigned the global role. The filtered rights can include rights present in both the potential rights defined for the global role and the rights defined for the rights package.

Abstract: An example method of managing rights in a cloud computing system includes: creating a role template having a role template set of rights to resources in the cloud computing system; assigning a tenant set of rights to the resources to each of a plurality of tenants of the cloud computing system, respectively; and creating a role instance for each respective tenant based on the role template and assigning the role instance to each respective tenant, where the role instance is linked to the role template in the cloud computing system and where the role instance includes a role instance set of rights that includes an intersection of the role template set of rights and the tenant set of rights for the respective tenant.

Abstract: The present application is directed to a distributed-services component of a distributed system that facilitates multi-cloud aggregation using a cloud-connector server and cloud-connector nodes that cooperate to provide services that are distributed across multiple clouds. These services include the transfer of virtual-machine containers, or workloads, between two different clouds and remote management interfaces.

Abstract: The present application is directed to a distributed-services component of a distributed system that facilitates multi-cloud aggregation using a cloud-connector server and cloud-connector nodes that cooperate to provide services that are distributed across multiple clouds. These services include the transfer of virtual-machine containers, or workloads, between two different clouds and remote management interfaces.

Abstract: Described are a system and method for accepting a string-based search expression, parsing the search expression into an expression tree, distributing the tree (or portion thereof) across heterogeneous repositories, and merging the results. The system is data-location transparent, encapsulates a federation model within query nodes and query trees. A client application produces and issues the search expression to the system. One type of expression tree node is an attribute node corresponding to an attribute included in the search expression. Metadata is associated with the attribute node for identifying each repository that supports the attribute represented by that attribute node. A call passes to the expression tree to perform the search, which occurs in a recursive-descent traversal of the tree. The search completes in a single tree traversal. Sub-trees receive a relevant portion of the search expression to translate into a query expression specific for each type of searched repository.

Abstract: Described are a system and method for generating a search expression for use in searching heterogeneous repositories. An application program receives user-supplied input. A template is selected based on a structure of the input. The input is scanned and tokenized. Each token is substituted into one or more locations within the template designated for that token to produce a string-based search expression. The search expression can have logical OR and logical AND operations, parentheses to specify precedence of evaluation, and an infix notation. Templates are modifiable for changing the content of search expressions constructed for a given user input.

Abstract: Described are a system and method for searching a relational database. An expression tree, representing a string-based search expression, has a logical node with a first child node and a second child node. Each child node represents a sub-expression of the search expression. The logical node represents a logical operator used to combine the sub-expressions represented by the children nodes. An attribute in the sub-expression of the first child node is determined to have a same data type and to be associated with the same table in a relational database as an attribute in the sub-expression of the second child node. A table alias is associated with the table. A sub-query expression is generated based on the sub-expressions of the children nodes and on the logical operator of the logical node. The sub-query expression is part of a repository-specific query expression to be used to query the relational database.

Abstract: Disclosed are systems and methods for providing an authorization framework for applications. A framework is provided for declaratively specifying authorization enforcement points and associating them with classes and subclasses by using declarations that map constants, local variables, or instance variables to permission classes and subclasses such as Java Permission, PermissionFactory, PrivilegedAction and PrivilegedActionFactory classes.