System, method and computer program product for performing one or more actions based on a determined access permissions for a plurality of users

• US 8,925,041 B2
• Filed: 12/14/2010
• Issued: 12/30/2014
• Est. Priority Date: 04/01/2010
• Status: Active Grant

• Current Assignee: Salesforce.com, Inc.
• Original Assignee: Salesforce.com, Inc.
• Inventors: Bulumulla, Irandi U., Cinarkaya, Bulent, Sebata-Dempster, Yurika, Sheth, Tripti, Warshavsky, Alex, Zotter, Brian
• Primary Examiner(s): Zand, Kambiz
• Assistant Examiner(s): Sanders, Stephen
• Application Number:
  US12/968,203
• Publication Number:
  US 20110247051A1
• Time in Patent Office: 1,477 Days
• Field of Search: 726/4
• US Class Current: 726/4
• CPC Class Codes: G06F 21/00 Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
• CPC Class Codes: G06F 21/604 Tools and structures for managing or administering access control systems
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: G06F 2221/2141 Access rights, e.g. capability lists, access control lists, access tables, access matrices

Abstract

In accordance with embodiments, there are provided mechanisms and methods for performing one or more actions based on determined access permissions for a plurality of users. These mechanisms and methods for performing one or more actions based on determined access permissions for a plurality of users can enable improved data collection and analysis, enhanced client knowledge of system access, etc.

Claims

1. A computer program product, comprising a non-transitory computer usable medium having a computer readable program code embodied therein, the computer readable program code adapted to be executed to cause a computer to implement a method, comprising:

identifying a plurality of users associated with a client of a system, where the client of the system uses a portal to limit access to client data within the system by each of the plurality of users;

identifying one or more user permissions for each of the plurality of users that enable access to predetermined client data within the system by each of the plurality of users via the portal;

identifying one or more sharing rules for the client of the system that enable access to predetermined client data within the system by each of the plurality of users via the portal; and

notifying the client of both the user permissions and the sharing rules, in addition to the predetermined client data to which access is enabled via the portal.

2. The computer program product of claim 1, wherein the system includes a multi-tenant on-demand database system.

3. The computer program product of claim 1, wherein the one or more user permissions include one or more data access permissions for each of the identified plurality of users that are identified by monitoring the types of data access available to the plurality of users within the system.

4. The computer program product of claim 1, wherein identifying the one or more user permissions includes monitoring administrator and user permissions for the system.

5. The computer program product of claim 3, wherein identifying the one or more user permissions and the one or more sharing rules is performed in an on-demand fashion.

6. The computer program product of claim 1, wherein notifying the client includes displaying a report to the client.

7. The computer program product of claim 6, wherein notifying the client includes aggregating the one or more user permissions and the one or more sharing rules, where the report includes the aggregation.

8. The computer program product of claim 1, wherein notifying the client includes listing the one or more user permissions and the one or more sharing rules to the client.

9. The computer program product of claim 1, wherein notifying the client includes providing one or more links to the client.

10. The computer program product of claim 6, wherein one or more hyperlinks are provided within the report that link to one or more setup pages associated with the reported.

11. The computer program product of claim 9, wherein the one or more links include links to retrieve additional information associated with the identified user permissions and sharing rules.

12. The computer program product of claim 1, wherein the computer program product is operable such that one or more actions are taken in response to the identified user permissions and sharing rules being run against preconfigured logic.

13. The computer program product of claim 1, wherein the computer program product is operable such that the access enabled by the identified user permissions and sharing rules is compared against a predetermined amount of access, and one or more operations are performed based on the comparison.

17. The computer program product of claim 1, wherein the system has a plurality of different places to change settings associated with the identified plurality of users, and wherein the notifying the client includes providing the client with a report summarizing the user permissions and the sharing rules such that the client is capable of avoiding having to view in the report individual system access aspects one at a time.

18. The computer program product of claim 1, wherein notifying the client includes displaying the predetermined client data to which access is enabled as well as the identified user permissions and the sharing rules.

14. A method, comprising:

identifying a plurality of users associated with a client of a system, where the client of the system uses a portal to limit access to client data within the system by each of the plurality of users;

identifying one or more user permissions for each of the plurality of users that enable access to predetermined client data within the system by each of the plurality of users via the portal;

identifying one or more sharing rules for the client of the system that enable access to predetermined client data within the system by each of the plurality of users via the portal; and

notifying the client of both the user permissions and the sharing rules, in addition to the predetermined client data to which access is enabled via the portal.

15. An apparatus, comprising:

a processor for;

identifying a plurality of users associated with a client of a system, where the client of the system uses a portal to limit access to client data within the system by each of the plurality of users;

identifying one or more user permissions for each of the plurality of users that enable access to predetermined client data within the system by each of the plurality of users via the portal;

identifying one or more sharing rules for the client of the system that enable access to predetermined client data within the system by each of the plurality of users via the portal; and

notifying the client of both the user permissions and the sharing rules, in addition to the predetermined client data to which access is enabled via the portal.

16. A method for transmitting code for use in a multi-tenant database system on a transmission medium, the method comprising:

transmitting code for identifying a plurality of users associated with a client of a system, where the client of the system uses a portal to limit access to client data within the system by each of the plurality of users;

transmitting code for identifying one or more user permissions for each of the plurality of users that enable access to predetermined client data within the system by each of the plurality of users via the portal;

transmitting code for identifying one or more sharing rules for the client of the system that enable access to predetermined client data within the system by each of the plurality of users via the portal; and

transmitting code for notifying the client of both the user permissions and the sharing rules, in addition to the predetermined client data to which access is enabled via the portal.