Share token issuance for declarative document authoring

• US 10,592,864 B2
• Filed: 12/09/2016
• Issued: 03/17/2020
• Est. Priority Date: 04/28/2016
• Status: Active Grant

• Current Assignee: Microsoft Technology Licensing LLC (Microsoft Corporation)
• Original Assignee: Microsoft Technology Licensing LLC (Microsoft Corporation)
• Inventors: Flutre, Arnaud Christian, Shaaban, Yasser E., Fransazov, Mariyan D., Colle, Olivier, Pennell, Andrew Michael, Chaudhry, Anjli, Vong, William Hong, Overholt, Mark David
• Primary Examiner(s): Shaifer Harriman, Dant B
• Application Number:
  US15/374,735
• Publication Number:
  US 20170316219A1
• Time in Patent Office: 1,194 Days
• Field of Search: 726 4
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 21/6209 to a single file or object, e.g. in a secure envelope, encrypted and accessed using a key, or with access control rules appended to the object itself
• CPC Class Codes: G06F 8/41 Compilation
• CPC Class Codes: G06F 8/71 Version control security arrangements therefor G06F21/57; Configuration management
• CPC Class Codes: G06Q 10/101 Collaborative creation, e.g. joint development of products or services
• CPC Class Codes: H04L 67/141 Setup of application sessions admission control or resource allocation in data switching networks H04L47/70

Abstract

Issuance of job tokens performed by an authorization computing entity so that authoring authorizations can be shared with other authors. Each of the job tokens represents an authorization to engage in a particular manner in an authoring session in which a declarative document is being authored. That engagement includes sharing one or more authorizations with other possible author. The declarative document is a computer program in the form of a list of declarative statements made in a declarative programming language. The management occurs by evaluating incoming requests to engage in various ways in an authoring session.

Claims

1. A method, implemented at a computer system comprising one or more physical hardware processor(s), for issuing a plurality of job tokens, each of the plurality of job tokens authorizing engagement in an authoring session in which a declarative document is authored for compilation into an executable application, the method, which is implemented by the one or more physical hardware processor(s) of the computer system, comprising:

generating, by the one or more physical hardware processor(s) of the computer system, the declarative document, wherein the declarative document comprises a plurality of nodes connected by a plurality of links, at least one link in the plurality of links representing a data transformation that occurs between a first node and a second node of the plurality of nodes, the first node and the second node being connected by the at least one link;

receiving, at the computer system, a request from a first entity to perform a first job in the authoring session in which the declarative document is to be authored;

determining, by the one or more physical hardware processor(s) of the computer system, a share authorization to grant to the first entity, the share authorization allowing the first entity to at least;

perform the first job in the authoring session; and

share at least one additional authorization with a second entity to perform a second job, wherein the at least one additional authorization allows the second entity to perform an edit function on a specific node representing a portion of the declarative document;

generating, by the one or more physical hardware processor(s) of the computer system, a job token that is structured to be interpretable as a representation that grants the first entity the share authorization so as to allow the first entity to use that job token to share the at least one additional authorization with the second entity to perform the second job;

transmitting, from the computer system, the generated job token to the first entity.

2. The method in accordance with claim 1, further comprising:

authenticating that the first entity is associated with the request.

3. The method in accordance with claim 2, wherein authenticating that the first entity is associated with the request comprises:

accessing an identity token with the request, the identity token issued by an identity service; and

verifying that the identity token represents that the identity token is associated with the first entity.

4. The method in accordance with claim 1, the method further comprising:

signing the generated job token.

5. The method in accordance with claim 4, further comprising:

providing the signed job token to a requestor that submitted the request.

6. The method in accordance with claim 1, further comprising:

providing the generated job token to a requestor that submitted the request.

7. The method in accordance with claim 1, the share authorization that allows the first entity to share the at least one additional authorization with the second entity comprising:

an authorization to allow the first entity particular access to the entire declarative document.

8. The method in accordance with claim 1, the share authorization that allows the first entity to share the at least one additional authorization with the second entity comprising:

an authorization to allow the first entity particular access to the portion of the declarative document.

9. The method in accordance with claim 8, the particular access being an edit access.

10. The method in accordance with claim 8, the particular access being a read access.

11. The method in accordance with claim 8, the particular access being a share access that allows the first entity to further share access with a third entity.

12. The method in accordance with claim 1, the first entity being a single user.

13. The method in accordance with claim 1, the first entity being a group comprising multiple users.

14. A computing system comprising:

one or more physical hardware processor(s); and

one or more computer-readable physical hardware storage device(s) having stored thereon computer-executable instructions that are executable by the one or more physical hardware processor(s) to cause the computing system to issue a plurality of job tokens, each of the plurality of job tokens authorizing engagement in an authoring session in which a declarative document is authored for compilation into an executable application, by causing the computing system to at least;

generate, by the one or more physical hardware processor(s) of the computing system, the declarative document, wherein the declarative document comprises a plurality of nodes connected by a plurality of links, at least one link in the plurality of links representing a data transformation that occurs between a first node and a second node of the plurality of nodes, the first node and the second node being connected by the at least one link;

receive, at the computing system, a request from a first entity to perform a first job in the authoring session in which the declarative document is authored;

determine, by the one or more physical hardware processor(s) of the computing system, a share authorization to grant to the first entity, the share authorization allowing the first entity to at least;

perform the first job in the authoring session; and

share at least one additional authorization with a second entity to perform a second job, wherein the at least one additional authorization allows the second entity to perform an edit function on a specific node representing a portion of the declarative document;

generate, by the one or more physical hardware processor(s) of the computing system, a job token that is structured to be interpretable as a representation that grants the first entity the share authorization to allow the first entity to use that job token to share the at least one additional authorization with the second entity to perform the second job;

transmit, from the computing system, the generated job token to the first entity.

15. The computing system of claim 14, wherein concurrent authoring is enabled, the concurrent authoring allowing for multiple job tokens to be associated with the authoring session, and

wherein a first job token included among the plurality of job tokens is associated with an authoring entity of the declarative document while a second job token is associated with an entity that is only participating in the authoring session by performing read operations.

16. The computing system in accordance with claim 14, the share authorization that allows the first entity to share the at least one additional authorization with the second entity comprising:

an authorization to allow the first entity particular access to at least the portion of the declarative document.

17. The computing system in accordance with claim 16, the particular access being an edit access.

18. The computing system in accordance with claim 16, the particular access being a read access.

19. The computing system in accordance with claim 16, the particular access being a share access that allows the first entity to further share access with a third entity.

20. One or more computer-readable physical hardware storage device(s) having stored thereon computer-executable instructions that are executable by one or more physical hardware processor(s) of a computer system to cause the computer system to issue a plurality of job tokens, each of the plurality of job tokens authorizing engagement in an authoring session in which a declarative document is authored for compilation into an executable application, by causing the computer system to at least:

generate, by the one or more physical hardware processor(s) of the computer system, the declarative document, wherein the declarative document comprises a plurality of nodes connected by a plurality of links, at least one link in the plurality of links representing a data transformation that occurs between a first node and a second node of the plurality of nodes, the first node and the second node being connected by the at least one link;

receive, at the computer system, a request from a first entity to perform a first job in the authoring session in which the declarative document is to be authored;

determine, by the one or more physical hardware processor(s) of the computer system, a share authorization to grant to the first entity, the share authorization allowing the first entity to at least;

perform the first job in the authoring session; and

share at least one additional authorization with a second entity to perform a second job, wherein the at least one additional authorization allows the second entity to perform an edit function on a specific node representing a portion of the declarative document;

generate, by the one or more physical hardware processor(s) of the computer system, a job token that is structured to be interpretable as a representation that grants the first entity the share authorization so as to allow the first entity to use that job token to share the at least one additional authorization with the second entity to perform the second job;

transmit, from the computer system, the generated job token to the first entity.