Abstract: An in-database application package and application instance for a data platform. The data platform creates an application instance of an application package having a versioned schema, creates one or more system roles for the application instance, creates a user role and an administrator role for the application instance, creates one or more objects of the application instance based on a versioned schema, and grants one or more use privileges to the one or more roles. Application instances of the application package are upgraded or patched on the data platform based on application package versions. To ensure a proper upgrade or patch, the data platform tracks versions of executing objects of application instances in a call context.

Abstract: A data platform for executing containers is provided. In some examples, the data platform receives an application from an application package of a provider account, the application including a setup script and a manifest of a service. The data platform activates access roles based on the manifest and creates the service and a compute pool using the setup script and a specification file accessed from the application package using an access role. The service is executed in the compute pool, accessing objects of the application package and of the data platform using the access roles.

Abstract: Example methods include providing a data platform for participants to assign roles of various rights to access data objects on the data platform. A first participant acting in a role as an owner may create a code entity on the data platform to interact with the data objects. A second participant acting in a role as an administrator may define a security boundary over the code entity created by the first participant. A third participant acting as a caller may request to interact with the data objects using the code entity. A processing device of the database system provides the third participant, access to the code entity created by the first participant based on the security boundary defined by the second participant.

Abstract: A data platform that upgrades applications having containerized services across multiple consumer user accounts when the data platform receives a new version from a provider user. For each consumer account utilizing the application, the data platform performs a series of upgrade operations. The operations include identifying the relevant set of services linked to the application and executing an upgrade command for each service to transition to the new version. The data platform actively monitors the health and version status of each service, ensuring they meet the upgrade criteria. The upgrade is deemed successful and confirmed by the data platform once all services are verified to be healthy and aligned with the new version, thus ensuring a seamless and efficient upgrade experience.

Abstract: A data platform for executing containers is provided. In some examples, the data platform receives an application from an application package of a provider account, the application including a setup script and a manifest of a service. The data platform activates access roles based on the manifest and creates the service and a compute pool using the setup script and a specification file accessed from the application package using an access role. The service is executed in the compute pool, accessing objects of the application package and of the data platform using the access roles.

Abstract: A data platform for managing an application as a first-class database object. The data object can include User Interface (UI) components. The data application can be shared by a provider account to a plurality of consumer accounts using a share object and based on grant commands. The consumer accounts can deploy and operate the UI component based on the share object.

Abstract: A data platform grants privileges to applications accessing resources of the data platform in a secure and efficient way. The data platform determines whether a privilege has been granted to an application and, if not, generates a validation of the request to grant the privilege using a manifest of the application. The data platform generates a grant privilege request user interface, presents the grant privilege user interface to a consumer of the data platform, receives a privilege grant authorization from the consumer, and grants the privilege to the application. The granted privilege is then used by the application to access the resource.

Abstract: An application package and application instance for a data platform. The application is created in a consumer account of a consumer using the application package. The consumer grants permissions for performing privileged actions in the consumer account to an application role of the application. The application creates objects in the application, creates objects outside of the application in the consumer account, and accesses external systems using permissions granted by the consumer.

Abstract: Methodologies for upgrading and patching an in-database application package and its application instances. A data platform determines a number of objects of an application instance running on the data platform at a previous version level of an application package of the application instance. In response to determining the number of objects of the application package running on the data platform at the previous version level of the application package is one or more, the data platform continues determining the number of objects running on the data platform at a previous version level of the application package. In response to determining the number of objects of the application instance running on the data platform at the previous version level of the application package is none, the data platform upgrades the application instance to the new version of the application package.

Abstract: An in-database application package and application instance for a data platform. The data platform creates an application instance of an application package having a versioned schema, creates one or more system roles for the application instance, creates a user role and an administrator role for the application instance, creates one or more objects of the application instance based on a versioned schema, and grants one or more use privileges to the one or more roles. Application instances of the application package are upgraded or patched on the data platform based on application package versions. To ensure a proper upgrade or patch, the data platform tracks versions of executing objects of application instances in a call context.

Abstract: An in-database application package and application instance for a data platform. The data platform creates an application instance of an application package having a versioned schema, creates one or more system roles for the application instance, creates a user role and an administrator role for the application instance, creates one or more objects of the application instance based on a versioned schema, and grants one or more use privileges to the one or more roles. Application instances of the application package are upgraded or patched on the data platform based on application package versions. To ensure a proper upgrade or patch, the data platform tracks versions of executing objects of application instances in a call context.

Abstract: A data platform for managing an application as a first-class database object. The data object can include User Interface (UI) components. The data application can be shared by a provider account to a plurality of consumer accounts using a share object and based on grant commands. The consumer accounts can deploy and operate the UI component based on the share object.

Abstract: Methodologies for upgrading and patching an in-database application package and its application instances. A data platform determines a number of objects of an application instance running on the data platform at a previous version level of an application package of the application instance. In response to determining the number of objects of the application package running on the data platform at the previous version level of the application package is one or more, the data platform continues determining the number of objects running on the data platform at a previous version level of the application package. In response to determining the number of objects of the application instance running on the data platform at the previous version level of the application package is none, the data platform upgrades the application instance to the new version of the application package.