On-demand database service system, method and computer program product for conditionally allowing an application of an entity access to data of another entity
First Claim
1. A non-transitory machine-readable medium carrying one or more sequences of instructions which, when executed by one or more processors, cause the one or more processors to carry out the steps of:
- presenting a user with an interface which describes permissions that are required for an application created by a first entity of an on-demand database service;
permitting the user to authorize the application based on the required permissions;
after permitting the user to authorize the application, receiving by the on-demand database service a request from the application, the request including a request to access data of the user associated with a database of the on-demand database service, wherein the first entity and the user are different users of the on-demand database service, and the on-demand database service stores data on behalf of each of the users in a logically separated manner such that, without authorization, data of one user is inaccessible to another user;
determining by the on-demand database service whether the application is authorized to access the data of the user associated with the database of the on-demand database service using a plurality of data access limitations associated with the application and indicated in a profile, wherein the data access limitations associated with the application are included with the application in a package, and the package is installed by the user;
conditionally allowing the access to the data of the user associated with the database of the on-demand database service, based on the determination;
receiving an update associated with the application; and
after receiving the update, presenting the update to the user for acceptance by the user;
wherein when the package is uninstalled, the profile indicating the plurality of data access limitations is also uninstalled.
1 Assignment
0 Petitions
Accused Products
Abstract
In accordance with embodiments, there are provided mechanisms and methods for conditionally allowing an application of an entity access to data of another entity in an on-demand database service. These mechanisms and methods for conditionally allowing an application of an entity access to data of another entity in an on-demand database service can enable embodiments to limit such access to the data, as desired. Furthermore, embodiments of such mechanisms and methods may provide additional security when sharing data among different subscribers to an on-demand database service.
168 Citations
13 Claims
-
1. A non-transitory machine-readable medium carrying one or more sequences of instructions which, when executed by one or more processors, cause the one or more processors to carry out the steps of:
-
presenting a user with an interface which describes permissions that are required for an application created by a first entity of an on-demand database service; permitting the user to authorize the application based on the required permissions; after permitting the user to authorize the application, receiving by the on-demand database service a request from the application, the request including a request to access data of the user associated with a database of the on-demand database service, wherein the first entity and the user are different users of the on-demand database service, and the on-demand database service stores data on behalf of each of the users in a logically separated manner such that, without authorization, data of one user is inaccessible to another user; determining by the on-demand database service whether the application is authorized to access the data of the user associated with the database of the on-demand database service using a plurality of data access limitations associated with the application and indicated in a profile, wherein the data access limitations associated with the application are included with the application in a package, and the package is installed by the user; conditionally allowing the access to the data of the user associated with the database of the on-demand database service, based on the determination; receiving an update associated with the application; and after receiving the update, presenting the update to the user for acceptance by the user; wherein when the package is uninstalled, the profile indicating the plurality of data access limitations is also uninstalled. - View Dependent Claims (2, 3, 4, 5, 6, 7, 8, 9, 10, 11)
-
-
12. An apparatus, comprising:
a processor; and one or more stored sequences of instructions which, when executed by the processor, cause the processor to carry out the steps of; presenting a user with an interface which describes permissions that are required for an application created by a first entity of an on-demand database service; permitting the user to authorize the application based on the required permissions; after permitting the user to authorize the application, receiving by the on-demand database service a request from the application, the request including a request to access data of the user associated with a database of the on-demand database service, wherein the first entity and the user are different users of the on-demand database service, and the on-demand database service stores data on behalf of each of the users in a logically separated manner such that, without authorization, data of one user is inaccessible to another user; determining by the on-demand database service whether the application is authorized to access the data of the user associated with the database of the on-demand database service using a plurality of data access limitations associated with the application and indicated in a profile, wherein the data access limitations associated with the application are included with the application in a package, and the package is installed by the user; conditionally allowing the access to the data of the user associated with the database of the on-demand database service, based on the determination; receiving an update associated with the application; and
after receiving the update, presenting the update to the user for acceptance by the user.;wherein when the package is uninstalled, the profile indicating the plurality of data access limitations is also uninstalled.
-
13. A method for transmitting code for use in a multi-tenant database system on a transmission medium, the method comprising:
-
transmitting code for presenting a user with an interface which describes permissions that are required for an application created by a first entity of an on-demand database service; transmitting code for permitting the user to authorize the application based on the required permissions; transmitting code for, after permitting the user to authorize the application, receiving by the on-demand database service a request from the application, the request including a request to access data of the user associated with a database of the on-demand database service, wherein the first entity and the user are different users of the on-demand database service, and the on-demand database service stores data on behalf of each of the users in a logically separated manner such that, without authorization, data of one user is inaccessible to another user; transmitting code for determining by the on-demand database service whether the application is authorized to access the data of the user associated with the database of the on-demand database service using a plurality of data access limitations associated with the application and indicated in a profile, wherein the data access limitations associated with the application are included with the application in a package, and the package is installed by the user; transmitting code for conditionally allowing the access to the data of the user associated with the database of the on-demand database service, based on the determination; transmitting code for receiving an update associated with the application; and transmitting code for presenting the update to the user for acceptance by the user; wherein when the package is uninstalled, the profile indicating the plurality of data access limitations is also uninstalled.
-
Specification