On-demand database service system, method and computer program product for conditionally allowing an application of an entity access to data of another entity
First Claim
Patent Images
1. A method, comprising:
- receiving a request from an application created by a first entity, wherein the application includes business logic and the request includes a request to access data of a second entity stored in a database of an on-demand database service;
determining, utilizing a hardware processor, whether the application is authorized to access the data of the second entity stored in the database of the on-demand database service using a plurality of data access limitations associated with the application and indicated in a profile, wherein the data access limitations are presented to the second entity for acceptance by the second entity;
conditionally allowing the access to the data of the second entity stored in the database of the on-demand database service, based on the determination and the acceptance; and
in response to an update associated with the application, requesting that the second entity accept the update associated with the application, and conditionally allowing the access to the data of the second entity stored in the database of the on-demand database service utilizing the application, based on the acceptance of the update associated with the application;
wherein the application is authenticated, and the application is conditionally installed based on the authentication;
wherein the data access limitations grant the application created by the first entity access to the data of the second entity;
wherein the first entity and the second entity are different tenants of the on-demand database service, such that the on-demand database service processes requests for each of the first entity and the second entity and stores information for each of the first entity and the second entity, and wherein the profile indicating the data access limitations granting the application created by the first entity access to the data of the second entity provides sharing with the first entity the data of the second entity that is stored in the database of the on-demand database service;
wherein a package includes the application and the data access limitations, and the package is installed by the second entity.
0 Assignments
0 Petitions
Accused Products
Abstract
In accordance with embodiments, there are provided mechanisms and methods for conditionally allowing an application of an entity access to data of another entity in an on-demand database service. These mechanisms and methods for conditionally allowing an application of an entity access to data of another entity in an on-demand database service can enable embodiments to limit such access to the data, as desired. Furthermore, embodiments of such mechanisms and methods may provide additional security when sharing data among different subscribers to an on-demand database service.
34 Citations
13 Claims
-
1. A method, comprising:
-
receiving a request from an application created by a first entity, wherein the application includes business logic and the request includes a request to access data of a second entity stored in a database of an on-demand database service;
determining, utilizing a hardware processor, whether the application is authorized to access the data of the second entity stored in the database of the on-demand database service using a plurality of data access limitations associated with the application and indicated in a profile, wherein the data access limitations are presented to the second entity for acceptance by the second entity;conditionally allowing the access to the data of the second entity stored in the database of the on-demand database service, based on the determination and the acceptance; and in response to an update associated with the application, requesting that the second entity accept the update associated with the application, and conditionally allowing the access to the data of the second entity stored in the database of the on-demand database service utilizing the application, based on the acceptance of the update associated with the application; wherein the application is authenticated, and the application is conditionally installed based on the authentication; wherein the data access limitations grant the application created by the first entity access to the data of the second entity; wherein the first entity and the second entity are different tenants of the on-demand database service, such that the on-demand database service processes requests for each of the first entity and the second entity and stores information for each of the first entity and the second entity, and wherein the profile indicating the data access limitations granting the application created by the first entity access to the data of the second entity provides sharing with the first entity the data of the second entity that is stored in the database of the on-demand database service; wherein a package includes the application and the data access limitations, and the package is installed by the second entity. - View Dependent Claims (2, 3, 4, 5, 6, 7, 8, 9, 10)
-
-
11. A non-transitory machine-readable medium carrying one or more sequences of instructions which, when executed by one or more processors, cause the one or more processors to carry out the steps of:
-
receiving a request from an application created by a first entity, wherein the application includes business logic and the request includes a request to access data of a second entity stored in a database of an on-demand database service; determining whether the application is authorized to access the data of the second entity stored in the database of the on-demand database service using a plurality of data access limitations associated with the application and indicated in a profile, wherein the data access limitations are presented to the second entity for acceptance by the second entity; conditionally allowing the access to the data of the second entity stored in the database of the on-demand database service, based on the determination and the acceptance; and in response to an update associated with the application, requesting that the second entity accept the update associated with the application, and conditionally allowing the access to the data of the second entity stored in the database of the on-demand database service utilizing the application, based on the acceptance of the update associated with the application; wherein the application is authenticated, and the application is conditionally installed based on the authentication; wherein the data access limitations grant the application created by the first entity access to the data of the second entity; wherein the first entity and the second entity are different tenants of the on-demand database service, such that the on-demand database service processes requests for each of the first entity and the second entity and stores information for each of the first entity and the second entity, and wherein the profile indicating the data access limitations granting the application created by the first entity access to the data of the second entity provides sharing with the first entity the data of the second entity that is stored in the database of the on-demand database service; wherein a package includes the application and the data access limitations, and the package is installed by the second entity.
-
-
12. An apparatus, comprising:
a processor; and one or more stored sequences of instructions which, when executed by the processor, cause the processor to carry out the steps of; receiving a request from an application created by a first entity, wherein the application includes business logic and the request includes a request to access data of a second entity stored in a database of an on-demand database service; determining whether the application is authorized to access the data of the second entity stored in the database of the on-demand database service using a plurality of data access limitations associated with the application and indicated in a profile, wherein the data access limitations are presented to the second entity for acceptance by the second entity; conditionally allowing the access to the data of the second entity stored in the database of the on-demand database service, based on the determination and the acceptance; and in response to an update associated with the application, requesting that the second entity accept the update associated with the application, and conditionally allowing the access to the data of the second entity stored in the database of the on-demand database service utilizing the application, based on the acceptance of the update associated with the application; wherein the application is authenticated, and the application is conditionally installed based on the authentication; wherein the data access limitations grant the application created by the first entity access to the data of the second entity; wherein the first entity and the second entity are different tenants of the on-demand database service, such that the on-demand database service processes requests for each of the first entity and the second entity and stores information for each of the first entity and the second entity, and wherein the profile indicating the data access limitations granting the application created by the first entity access to the data of the second entity provides sharing with the first entity the data of the second entity that is stored in the database of the on-demand database service;
wherein a package includes the application and the data access limitations, and the package is installed by the second entity.
-
13. A method for transmitting code for use in a multi-tenant database system on a transmission medium, the method comprising:
-
transmitting code for receiving a request from an application created by a first entity, wherein the application includes business logic and the request includes a request to access data of a second entity stored in a database of an on-demand database service; transmitting code for determining, utilizing a hardware processor, whether the application is authorized to access the data of the second entity stored in the database of the on-demand database service using a plurality of data access limitations associated with the application and indicated in a profile, wherein the data access limitations are presented to the second entity for acceptance by the second entity; transmitting code for conditionally allowing the access to the data of the second entity stored in the database of the on-demand database service, based on the determination and the acceptance; transmitting code for, in response to an update associated with the application, requesting that the second entity accept the update associated with the application, and conditionally allowing the access to the data of the second entity stored in the database of the on-demand database service utilizing the application, based on the acceptance of the update associated with the application; and wherein the application is authenticated, and the application is conditionally installed based on the authentication; wherein the data access limitations grant the application created by the first entity access to the data of the second entity; wherein the first entity and the second entity are different tenants of the on-demand database service, such that the on-demand database service processes requests for each of the first entity and the second entity and stores information for each of the first entity and the second entity, and wherein the profile indicating the data access limitations granting the application created by the first entity access to the data of the second entity provides sharing with the first entity the data of the second entity that is stored in the database of the on-demand database service; wherein a package includes the application and the data access limitations, and the package is installed by the second entity.
-
Specification