External platform extensions in a multi-tenant environment

• US 10,038,698 B2
• Filed: 01/27/2016
• Issued: 07/31/2018
• Est. Priority Date: 07/25/2013
• Status: Active Grant

• Current Assignee: Oracle International Corporation (Oracle Corporation)
• Original Assignee: Oracle International Corporation (Oracle Corporation)
• Inventors: Mellor, David R.
• Primary Examiner(s): Dao, Thuy
• Assistant Examiner(s): Berman, Stephen
• Application Number:
  US15/008,305
• Publication Number:
  US 20160139911A1
• Time in Patent Office: 916 Days
• CPC Class Codes: G06F 16/113 Details of archiving lifecycle management in storage systems G06F3/0649; backup systems G06F11/1446
• CPC Class Codes: G06F 16/1756 based on delta files
• CPC Class Codes: G06F 16/211 Schema design and management
• CPC Class Codes: G06F 16/83 Querying
• CPC Class Codes: G06F 21/604 Tools and structures for managing or administering access control systems
• CPC Class Codes: G06F 21/62 Protecting access to data via a platform, e.g. using keys or access control rules
• CPC Class Codes: G06F 21/6209 to a single file or object, e.g. in a secure envelope, encrypted and accessed using a key, or with access control rules appended to the object itself
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: G06F 2221/2141 Access rights, e.g. capability lists, access control lists, access tables, access matrices
• CPC Class Codes: G06F 8/65 Updates security arrangements therefor G06F21/57
• CPC Class Codes: G06F 8/658 Incremental updates; Differential updates
• CPC Class Codes: G06F 8/71 Version control security arrangements therefor G06F21/57; Configuration management
• CPC Class Codes: G06F 9/44505 Configuring for program initiating, e.g. using registry, configuration files
• CPC Class Codes: H04L 41/0803 Configuration setting
• CPC Class Codes: H04L 63/101 Access control lists [ACL]
• CPC Class Codes: H04L 63/102 Entity profiles
• CPC Class Codes: H04L 67/1001 for accessing one among a plurality of replicated servers

Abstract

Methods and systems are described for allowing third party developers to add extensions to a cloud service provider'"'"'s software as a service (SaaS) services by editing an ‘empty’ config file according to a schema provided by the cloud service provider to form a delta file and then merging the delta file with an internal, full version of the config file. The full config file is then used to initialize and instantiate objects upon a restart of the cloud provider'"'"'s services.

Claims

1. A method comprising:

defining, in a first config file based on a file schema, an access rule for a feature of a service in a cloud environment;

creating, by a computing system of a service provider system, an empty config file based on the first config file, wherein the empty config file contains headers based on the first config file and the empty config file contains no configuration entries;

providing, by the computing system of the service provider system, to a computing device external to the service provider system, the empty config file to enable editing of the empty config file at the computing device;

determining, by the computing system, a change to the empty config file based on editing of the empty config file at the computing device;

creating, by the computing system, a delta file comprising the change to the empty config file, wherein the change is identified as defining a service access of the feature of the service;

modifying, by the computing system, an archive formatted file that is included in a library of class files, wherein the archive formatted file is modified to include the created delta file;

creating, by the computing system, a unified config file having the feature of the service, wherein the unified config file is created by merging the delta file with the first config file;

reading, by the computing system, the unified config file; and

in response to reacting the unified config file, instantiating, by the computing system, an object for the feature of the service using the unified config file.

2. The method of claim 1, further comprising:

reading the file schema, wherein the file schema defines an element, a child element, and an attribute;

receiving the empty config file;

allowing editing of the empty config file to change the empty config file to define the service access of the feature of the service; and

initializing the object using the unified config file.

3. The method of claim 1, further comprising:

initiating the computing system to restart, wherein restarting the computing system causes the computing system to read the unified config file; and

after the computing system has restarted, configuring, by the computing system, the feature of the service based on the object instantiated for the feature of the service.

4. The method of claim 1, wherein the computing system is included in a cloud computer system that provides a cloud environment for one or more tenants of the service provider system.

5. The method of claim 1, further comprising:

determining whether to grant access to the feature of the service based on the service access in the unified config file used to instantiate the object.

6. The method of claim 5, further comprising:

denying the access to the feature of the service based on determining not to grant the access to the feature of the service; and

granting the access to the feature of the service based on determining to grant the access to the feature of the service.

7. The method of claim 1, further comprising:

detecting an error reading one or more configurations for the service access of the feature from the unified config file; and

upon detecting the error, preventing the one or more configurations from being read from the unified config file;

wherein the object for the feature of the service is instantiated without using the one or more configurations that are prevented from being read from the unified config file.

8. The method of claim 1, wherein the unified config file is an executable code config file.

9. The method of claim 1, wherein the file schema includes an extensible markup language (XML) schema, and wherein the first config file conforms to the XML schema.

10. The method of claim 1, wherein the first config file is in an Application Development Framework (ADF) library jar file.

11. A system comprising:

at least one processor;

a memory accessible to the at least one processor, the memory storing instructions executable by the at least one processor to perform operations comprising;

defining, in a first config file based on a file schema, an access rule for a feature of a service in a cloud environment;

creating an empty config file based on the first config file, wherein the empty config file contains headers based on the first config file and the empty config file contains no configuration entries;

providing, by a service provider system, to a computing device external to the service provider system, the empty config file to enable editing of the empty config file at the computing device;

determining a change to the empty config file based on editing of the empty config file at the computing device;

creating a delta file comprising the change to the empty config file, wherein the change is identified as defining a service access of the feature of the service;

modifying an archive formatted file that is included in a library of class files, wherein the archive formatted file is modified to include the created delta file;

creating a unified config file having the feature of the service, wherein the unified config file is created by merging the delta file with the first config file;

reading the unified config file; and

in response to reading the unified config file, instantiating an object for the feature of the service using the unified config file.

12. The system of claim 11, wherein the operations further comprise:

initiating the system to restart, wherein restarting the system causes the reading of the unified config file; and

after the system has restarted, configuring the feature of the service based on the object instantiated for the feature of the service.

13. The system of claim 11, wherein the at least one processor and the memory are included in a cloud computer system that provides a cloud environment for one or more tenants.

14. The system of claim 11, wherein the operations further comprise:

determining whether to grant access to the feature of the service based on the service access in the unified config file used to instantiate the object;

denying the access to the feature of the service based on determining not to grant the access to the feature of the service; and

granting the access to the feature of the service based on determining to grant the access to the feature of the service.

15. The system of claim 11, wherein the operations further comprise:

detecting an error reading one or more configurations for the service access of the feature from the unified config file; and

upon detecting the error, preventing the one or more configurations from being read from the unified config file;

wherein the object for the feature of the service is instantiated without using the one or more configurations that are prevented from being read from the unified config file.

16. The system of claim 11, wherein the file schema includes an extensible markup language (XML) schema, and wherein the first config file conforms to the XML schema.

17. A non-transitory machine-readable tangible medium storing instructions for causing one or more machines of a service provider system to perform operations comprising:

defining, in a first config file based on a file schema, an access rule for a feature of a service in a cloud environment;

creating an empty config file based on the first config file, wherein the empty config file contains headers based on the first config file and the empty config file contains no configuration entries;

providing to a computing device external to the service provider system, the empty config file to enable editing of the empty config file at the computing device;

determining a change to the empty config file based on editing of the empty config file at the computing device;

creating a delta file comprising the change to the empty config file, wherein the change is identified as defining a service access of the feature of the service;

modifying an archive formatted file that is included in a library of class files, wherein the archive formatted file is modified to include the created delta file;

creating a unified config file having the feature of the service, wherein the unified config file is created by merging the delta file with the first config file;

reading the unified config file; and

in response to reading the unified config file, instantiating an object for the feature of the service using the unified config file.

18. The non-transitory machine-readable tangible medium of claim 17, wherein the operations further comprise:

determining whether to grant access to the feature of the service based on the service access in the unified config file used to instantiate the object;

denying the access to the feature of the service based on determining not to grant the access to the feature of the service; and

granting the access to the feature of the service based on determining to grant the access to the feature of the service.

19. The non-transitory machine-readable tangible medium of claim 17, wherein the operations further comprise:

detecting an error reading one or more configurations for the service access of the feature from the unified config file; and

upon detecting the error, preventing the one or more configurations from being read from the unified config file;

wherein the object for the feature of the service is instantiated without using the one or more configurations that are prevented from being read from the unified config file.

20. The non-transitory machine-readable tangible medium of claim 17, wherein the service provider system is a cloud computer system that provides a cloud environment for one or more tenants of the service provider system.