System and method for controlling the on and off state of features of business logic at runtime

• US 10,037,430 B2
• Filed: 10/27/2015
• Issued: 07/31/2018
• Est. Priority Date: 12/19/2012
• Status: Active Grant

• Current Assignee: Salesforce.com, Inc.
• Original Assignee: Salesforce.com, Inc.
• Inventors: Jain, Samarpan, Comel, Reuben
• Primary Examiner(s): Kim, Jung W
• Assistant Examiner(s): De Jesus Lassala, Carlos M
• Application Number:
  US14/924,442
• Publication Number:
  US 20160048377A1
• Time in Patent Office: 1,008 Days
• CPC Class Codes: G06F 21/604 Tools and structures for managing or administering access control systems
• CPC Class Codes: G06F 21/62 Protecting access to data via a platform, e.g. using keys or access control rules
• CPC Class Codes: G06F 21/6209 to a single file or object, e.g. in a secure envelope, encrypted and accessed using a key, or with access control rules appended to the object itself
• CPC Class Codes: G06F 21/629 to features or functions of an application
• CPC Class Codes: G06F 8/20 Software design
• CPC Class Codes: G06F 8/41 Compilation
• CPC Class Codes: G06F 8/70 Software maintenance or management

Abstract

Methods and systems are provided for controlling the execution of business logic that allows features to be turned on or off at run time for each particular user entity of a plurality of user entities. Prior to run time a library is configured based on an administrator'"'"'s interaction with an interactive control panel at a computer of the system. For each particular user entity and for each particular code block of an object that comprises a plurality of code blocks each corresponding to a particular feature and having an enabling predicate associated with that particular code block, the library can be configured by defining an on/off state for each feature of that particular code block via an enabling predicate associated with that particular feature. The library can then be cached in a custom settings cache of the system for use at run time.

Claims

1. A method for controlling the execution of business logic of a multi-tenant application that is shared by multiple tenants for use in a multi-tenant application development system that allows features of the multi-tenant application to be turned on or off at run time for each particular user entity of a plurality of user entities that are part of a particular tenant in the multi-tenant application development system, wherein the multi-tenant application comprises a plurality of code blocks, wherein each code block corresponds to a particular feature of the multi-tenant application and has an enabling predicate associated with that particular code block, the method comprising:

prior to run time;

configuring a permissions library that is shared by multiple tenants based on interaction with an interactive control panel at a computer by an administrator associated with the particular tenant of the multi-tenant application development system, wherein configuring the permissions library comprises;

defining, for each particular user entity of the particular tenant, an on/off state for each particular code block via the enabling predicate associated with that particular code block, wherein each particular user entity of the particular tenant is either;

an individual user of the particular tenant, a user group that corresponds to a specific group of users of the particular tenant, a group of users of the particular tenant that have been assigned to a profile, or a default value that represents and corresponds to all users of the particular tenant; and

storing a hash of the configured permissions library in a custom settings cache as a cached permissions library for the particular tenant for use at run time when one or more user entities of the particular tenant attempts to invoke a particular one of the code blocks to determine if that particular one of the code blocks is to be executed, wherein the custom setting cache is provided at the multi-tenant application development system.

2. The method of claim 1, further comprising:

then at run time;

applying, at the multi-tenant application development system, a first enable predicate associated with a first code block to the cached permissions library to cause the cached permissions library to evaluate either a true result or a false result for the first enable predicate at run time; and

executing the first code block, at the multi-tenant application development system, if the cached permissions library evaluates a true result for the first enable predicate.

3. The method of claim 2, further comprising:

not executing the first code block, at the multi-tenant application development system, if the cached permissions library evaluates a false result for the first enable predicate.

4. The method of claim 2, wherein the first enable predicate comprises:

an IF ENABLED then execute code block that corresponds to a particular feature.

5. The method of claim 2, further comprising:

at run time;

applying, at the multi-tenant application development system, a second enable predicate associated with a second code block to the cached permissions library to cause the cached permissions library to evaluate either a true result or a false result for the second enable predicate; and

executing the second code block, at the multi-tenant application development system, if the cached permissions library evaluates a true result for the second enable predicate.

6. The method of claim 1, wherein configuring the permissions library comprises:

editing the permissions library using the interactive control panel; and

updating the edited cached permissions library at the custom settings cache for the particular tenant.

7. The method of claim 6, wherein updating comprises automatically populating the cache upon saving the edited cached permissions library.

8. The method of claim 1, wherein caching the permissions library comprises:

storing the cached permissions library in the form of an MD5 hash.

9. The method of claim 1, wherein configuring the permissions library comprises:

displaying the interactive control panel; and

populating the custom settings cache for the particular tenant based on the interaction with the interactive control panel at the computer by the administrator associated with the particular tenant of the multi-tenant application development system.

10. The method of claim 1, wherein defining further comprises:

defining a plurality of first attributes associated with a parent object, the first attributes comprising;

a name of a particular code block; and

a namespace for each feature of that particular code block.

11. The method of claim 10, wherein defining further comprises:

defining a plurality of second attributes associated with a child object, the second attributes comprising;

an entity field having a value that specifies that particular user entity of the particular tenant; and

an entity variable that comprises an on/off field that defines the on/off state for each feature of that particular code block for that particular user entity of the particular tenant.

12. The method of claim 11, wherein the first attributes further comprise:

a maintenance flag that is used to override an on/off state for each feature of that particular code block irrespective of the value that is cached in the cached permissions library for that particular enabling predicate.

13. The method of claim 1, wherein at least one of the user entities is an automated user entity.

16. The multi-tenant application development system of claim 13, wherein at least one of the user entities is an automated user entity.

14. A system comprising:

a multi-tenant application development system configured to generate a multi-tenant application at run-time, wherein the multi-tenant application is shared by multiple tenants; and

a computer comprising;

a display configured to display an interactive control panel, the interactive control panel for controlling the execution of business logic of the multi-tenant application that allows Features of the multi-tenant application to be turned on or off at run time for each particular user entity of a plurality of user entities that are part of a particular tenant in the multi-tenant application development system based on interaction with the interactive control panel by an administrator associated with the particular tenant of the multi-tenant application development system, wherein the multi-tenant application comprises a plurality of code blocks, wherein each code block corresponds to a particular feature of the multitenant application and has an enabling predicate associated with that particular code block, wherein the interactive control panel comprises;

a parent object editing module, displayed at the display, configured to allow the administrator to define for each particular code block, prior to run time, a name of a particular code block; and

a child object editing module, displayed at the display, configured to allow the administrator to configure a permissions library that is shared by multiple tenants by defining for each particular user entity of the particular tenant, prior to run time, an on/off state for each particular code block for that particular user entity of the particular tenant via the enabling predicate associated with that particular code block, wherein each particular user entity of the particular tenant is either;

an individual user of the particular tenant, a user group that corresponds to a specific group of users of the particular tenant, a group of users of the particular tenant that have been assigned to a profile, or a default value that represents and corresponds to all users of the particular tenant; and

a server, comprising;

a custom settings cache for the particular tenant for storing a hash of the configured permissions library in the custom settings cache as a cached permissions library for the particular tenant for use at run time when one or more user entities of the particular tenant attempts to invoke a particular one of the code blocks to determine if that particular one of the code blocks is to be executed, wherein the custom setting cache is provided at the multi-tenant application development system, the cached permissions library comprising the plurality of first attributes and the plurality of second attributes.

15. The system of claim 14, wherein the parent object editing module is configured to allow the administrator to define for each particular code block, prior to run time, a plurality of first attributes associated with a parent object, the first attributes comprising:

the name of a particular code block;

a namespace for each feature of that particular code block; and

a maintenance flag that is used to override an on/off state for each feature of that particular code block irrespective of the value that is cached in the cached permissions library for that particular enabling predicate;

wherein the child object editing module, is configured to allow the administrator to define for each particular user entity of the particular tenant, prior to run time, a plurality of second attributes associated with a child object, the second attributes comprising;

an entity field that specifies that particular user entity of the particular tenant, and

an entity variable that comprises an on/off field that defines the on/off state for each feature of that particular code block for that particular user entity of the particular tenant.

17. Computer code embodied in a non-transitory medium for controlling the execution of business logic of a multi-tenant application that is shared by multiple tenants for use in a multi-tenant application development system that allows features of the multi-tenant application to be turned on or off at run time for each particular user entity of a plurality of user entities that are part of a particular tenant in the multi-tenant application development system, wherein the multi-tenant application comprises a plurality of code blocks, wherein each code block corresponds to a particular feature of the multi-tenant application and has an enabling predicate associated with that particular code block, the computer code configurable to perform the steps of:

configuring a permissions library that is shared by multiple tenants based on interaction with an interactive control panel at a computer by an administrator associated with the particular tenant of a multi-tenant application development system, wherein configuration of the permissions library allows for control of the execution of business logic by allowing features of the business logic to be turned on or off at run time for each particular user entity of a plurality of user entities particular user entity of the particular tenant, wherein configuring the permissions library comprises;

defining, for each particular user entity of the particular tenant, an on/off state for each particular code block via the enabling predicate associated with that particular code block, wherein each particular user entity of the particular tenant is either;

an individual user of the particular tenant, a user group that corresponds to a specific group of users of the particular tenant, a group of users of the particular tenant that have been assigned to a profile, or a default value that represents and corresponds to all users of the particular tenant; and

storing a hash of the configured permissions library in a custom settings cache as a cached permissions library for the particular tenant for use at run time when one or more user entities of the particular tenant attempts to invoke a particular one of the code blocks to determine if that particular one of the code blocks is to be executed, wherein the custom setting cache is provided at the multi-tenant application development system.

18. The computer code of claim 17 further comprising:

at run time;

applying, at the multi-tenant application development system, a first enable predicate associated with a first code block to the cached permissions library to cause the cached permissions library to evaluate either a true result or a false result for the first enable predicate at run time; and

executing the first code block, at the multi-tenant application development system, if the cached permissions library evaluates a true result for the first enable predicate.

19. The computer code of claim 18, further configured to:

at run time;

applying, at the multi-tenant application development system, a second enable predicate associated with a second code block to the cached permissions library to cause the cached permissions library to evaluate either a true result or a false result for the second enable predicate; and

executing the second code block, at the multi-tenant application development system, if the cached permissions library evaluates a true result for the second enable predicate.

20. The computer code of claim 17, wherein defining further comprises:

defining a plurality of first attributes associated with a parent object, the first attributes comprising;

a name of a particular code block;

a namespace for each feature of that particular code block; and

a maintenance flag that is used to override an on/off state for each feature of that particular code block irrespective of the value that is cached in the cached permissions library for that particular enabling predicate; and

defining a plurality of second attributes associated with a child object, the second attributes comprising;

an entity field having a value that specifies that particular user entity of the particular tenant; and

an entity variable that comprises an on/off field that defines the on/off state for each feature of that particular code block for that particular user entity of the particular tenant.

21. The computer code of claim 17, wherein configuring the permissions library comprises:

displaying the interactive control panel; and

populating the custom settings cache for the particular tenant based on the interaction with the interactive control panel at the computer by the administrator associated with the particular tenant of the multi-tenant application development system.

22. The computer code of claim 17, wherein at least one of the user entities is an automated user entity.