G06F16/245

Access Control Framework For Graph Entities
20230237186 · 2023-07-27 ·

A system can receive a database query that is associated with a user account and that is directed to a first database that stores graph data. The system can determine, based on information received from a second database, whether the user account has authorization to make the database query, wherein the second database stores graph metadata information about the first database, and wherein a schema of the second database corresponds to data entities of the first database and relations between respective data entries of the first database. The system can in response to determining from the second database that the user account has the authorization to make the database query, perform the database query with respect to the first database to produce a query result, and return the database query result to be accessible via a device associated with authenticated use of the user account.

Access Control Framework For Graph Entities
20230237186 · 2023-07-27 ·

A system can receive a database query that is associated with a user account and that is directed to a first database that stores graph data. The system can determine, based on information received from a second database, whether the user account has authorization to make the database query, wherein the second database stores graph metadata information about the first database, and wherein a schema of the second database corresponds to data entities of the first database and relations between respective data entries of the first database. The system can in response to determining from the second database that the user account has the authorization to make the database query, perform the database query with respect to the first database to produce a query result, and return the database query result to be accessible via a device associated with authenticated use of the user account.

Application driven data change conflict handling system

Techniques for handling data access conflicts are disclosed. In some embodiments, a conflict handling system detects a set of one or more objects that are currently being accessed by an application. The conflict handling system queries a database to determine whether the set of one or more objects have changes pending. Responsive to determining that an object has a change pending, the conflict handling system identifies and loads, at runtime of the application, a set of one or more application-specific rules that are defined for handling data conflicts. The conflict handling system executes the rules to generate a conflict resolution result for the object. The application may then perform an application-specific function based on the conflict resolution result.

Application driven data change conflict handling system

Techniques for handling data access conflicts are disclosed. In some embodiments, a conflict handling system detects a set of one or more objects that are currently being accessed by an application. The conflict handling system queries a database to determine whether the set of one or more objects have changes pending. Responsive to determining that an object has a change pending, the conflict handling system identifies and loads, at runtime of the application, a set of one or more application-specific rules that are defined for handling data conflicts. The conflict handling system executes the rules to generate a conflict resolution result for the object. The application may then perform an application-specific function based on the conflict resolution result.

Pattern search request embedded in a transport mode command word for a channel subsystem in a storage system

Provided are a computer program product, system, and method for processing request directed through a channel subsystem to a storage server. In one embodiment, a pattern search request is embedded in a Device Command Word (DCW) which allows the storage server to do all or substantially all of the search and comparison work in response to as few as a single DCW from the host. In addition, I/O processing can be enhanced to use the target record of interest of a successful embedded pattern search request as the starting point for read/write I/O processing, all in response to as few as a single DCW. Still further, orientation rules can also be relaxed such that once a target record is found, any and all fields of the record can be accessed and utilized in execution of subsequent commands of the initial or subsequent DCWs of the chain.

Pattern search request embedded in a transport mode command word for a channel subsystem in a storage system

Provided are a computer program product, system, and method for processing request directed through a channel subsystem to a storage server. In one embodiment, a pattern search request is embedded in a Device Command Word (DCW) which allows the storage server to do all or substantially all of the search and comparison work in response to as few as a single DCW from the host. In addition, I/O processing can be enhanced to use the target record of interest of a successful embedded pattern search request as the starting point for read/write I/O processing, all in response to as few as a single DCW. Still further, orientation rules can also be relaxed such that once a target record is found, any and all fields of the record can be accessed and utilized in execution of subsequent commands of the initial or subsequent DCWs of the chain.

Pathnames with embedded queries
11567933 · 2023-01-31 · ·

In one embodiment, a method includes receiving, at a network management system (NMS) from a client, a message having an object reference embedding a query, the query requesting an operation to be performed on data stored in a data tree maintained by the NMS. The method provides for generating, by the NMS, a result of the query by performing the operation on the data. In this embodiment, the method further provides for sending, by the NMS to the client, the result of the query. In some embodiments, the object reference may include a pathname.

Pathnames with embedded queries
11567933 · 2023-01-31 · ·

In one embodiment, a method includes receiving, at a network management system (NMS) from a client, a message having an object reference embedding a query, the query requesting an operation to be performed on data stored in a data tree maintained by the NMS. The method provides for generating, by the NMS, a result of the query by performing the operation on the data. In this embodiment, the method further provides for sending, by the NMS to the client, the result of the query. In some embodiments, the object reference may include a pathname.

Tenant grouping for secure transport of content

A distribution network communicates content to tenant groups in a secure manner. An engine of the distribution network receives content created utilizing an application having different customers and partners. The engine also receives: a first identifier indicating a customer of the application with which a tenant is associated, and a second identifier indicating a partner of the application with which the tenant is associated. The engine references a stored database table to correlate the first identifier and the second identifier. Based upon the first identifier and the second identifier, the engine evaluates whether the tenant is to be provided access to the content. The engine may provide the tenant with the content according to an access right determined from the first identifier and the second identifier. Certain embodiments may find particular use disseminating content to new tenants of a customer, based upon prior distribution to other tenants of that customer.

Tenant grouping for secure transport of content

A distribution network communicates content to tenant groups in a secure manner. An engine of the distribution network receives content created utilizing an application having different customers and partners. The engine also receives: a first identifier indicating a customer of the application with which a tenant is associated, and a second identifier indicating a partner of the application with which the tenant is associated. The engine references a stored database table to correlate the first identifier and the second identifier. Based upon the first identifier and the second identifier, the engine evaluates whether the tenant is to be provided access to the content. The engine may provide the tenant with the content according to an access right determined from the first identifier and the second identifier. Certain embodiments may find particular use disseminating content to new tenants of a customer, based upon prior distribution to other tenants of that customer.