Abstract: An organization-based access control (OBAC) system defines resource access rights using graph-based team node trees, each comprising a plurality of hierarchically-connected team nodes. Each team node is associated with a list of members, team resources, and a team-specific access policy that defines the rights of team members to access the team resources. When a node in a tree has one or more descendant nodes, boundary access policies can be generated to define rights, of members of the node, to access resources associated with descendant nodes. Such boundary access policies may grant parent team members different access rights for child team resources than is granted to the child team members. A node management policy can grant rights to manage a portion of a team node tree. Team-specific access policies, boundary access policies, and management policies can include unique references to one or more particular resources, resource attributes, or groups of resources.

Abstract: A social media enrichment framework is described herein. In one or more embodiments, the framework is configured to store a set of interface endpoints for accessing different sources of analytic metadata. The framework further stores a set of mappings between social media object types and interface endpoints. Responsive to receiving a social media object having a particular social media object type, the framework identifies, within the set of mappings, a mapping between the particular social media object type and at least one interface endpoint in the set of interface endpoints. The framework then obtains, from one or more sources using the at least one interface endpoint, a set of one or more metrics relevant to the social media object and stores the set of one or more metrics in association with the social media object.

Abstract: A social media enrichment framework is described herein. In one or more embodiments, the framework is configured to store a set of interface endpoints for accessing different sources of analytic metadata. The framework further stores a set of mappings between social media object types and interface endpoints. Responsive to receiving a social media object having a particular social media object type, the framework identifies, within the set of mappings, a mapping between the particular social media object type and at least one interface endpoint in the set of interface endpoints. The framework then obtains, from one or more sources using the at least one interface endpoint, a set of one or more metrics relevant to the social media object and stores the set of one or more metrics in association with the social media object.