System, method and computer program product for conditionally enabling an installation aspect

• US 9,098,365 B2
• Filed: 10/13/2010
• Issued: 08/04/2015
• Est. Priority Date: 03/16/2010
• Status: Active Grant

• Current Assignee: Salesforce.com, Inc.
• Original Assignee: Salesforce.com, Inc.
• Inventors: Smith, Andrew, Weissman, Craig, Dvinov, Danil
• Primary Examiner(s): Kang, Insun
• Application Number:
  US12/903,381
• Publication Number:
  US 20110231835A1
• Time in Patent Office: 1,756 Days
• Field of Search: None
• US Class Current: 1/1
• CPC Class Codes: G06F 21/52 during program execution, e.g. stack integrity ; Preventing unwanted data erasure; Buffer overflow
• CPC Class Codes: G06F 2221/2141 Access rights, e.g. capability lists, access control lists, access tables, access matrices
• CPC Class Codes: G06F 8/61 Installation

Abstract

In accordance with embodiments, there are provided mechanisms and methods for conditionally enabling an installation aspect. In one embodiment, code to be installed within a multi-tenant on-demand database system is identified. Additionally, a feature required to install the code is identified, where the feature includes data that is required to be accessed by the code when the code is installed and run within the multi-tenant on-demand database system. Further, the feature is conditionally enabled, based on one or more criteria.

Claims

1. A computer program product, comprising a non-transitory computer readable medium having a computer readable program code embodied therein, the computer readable program code causing a computer to implement a method, the method comprising:

receiving, at a system, a request to install application code, the system configured to host one or more applications;

identifying by the system prior to an installation of the application code within the system one or more actions required to be performed by the system during the installation of the application code, where the one or more actions include accessing data stored within the system, where the data required to be accessed during the installation of the application code is separate from the application code to be installed within the system;

identifying, by the system, a developer of the application code; and

conditionally allowing, by the system, the installation of the application code within the system, based on a comparison of the one or more actions to be performed by the system during the installation of the application and the identified developer of the application code against one or more rules.

2. The computer program product of claim 1, wherein the developer is associated with the system.

3. The computer program product of claim 1, wherein the one or more actions further include communicating the data outside of the system by the application code.

4. The computer program product of claim 1, wherein the one or more actions further include operations that are performed on the data.

5. The computer program product of claim 1, wherein the access to the data further includes at least one of reading the data accessed by the application code, updating the data accessed by the application code, and deleting the data accessed by the application code.

6. The computer program product of claim 1, wherein the one or more actions are identified by analyzing the application code.

7. The computer program product of claim 6, wherein the application code is statically introspected in order to determine what data is to be accessed by the application code and how such access is to occur.

8. The computer program product of claim 1, wherein the identified one or more actions are presented to an entity associated with the application code.

9. The computer program product of claim 1, wherein a user is presented with the one or more actions.

10. The computer program product of claim 9, further comprising receiving input from the user in response to the presentation of the one or more actions to the user.

11. The computer program product of claim 10, wherein the installation of the application code is also based on the input from the user.

12. The computer program product of claim 1, further comprising extending the one or more actions required with respect to the installation of the application code, based on the identifying.

13. The computer program product of claim 12, wherein extending the one or more actions required with respect to the installation of the application code includes adding or extending access to the data of the system.

14. The computer program product of claim 1, wherein the installation of the application code is allowed within the system if the one or more rules are met by the one or more actions.

15. The computer program product of claim 1, wherein the installation of the application code is not allowed within the system if the one or more rules are not met by the one or more actions.

16. The computer program product of claim 1, wherein the one or more rules indicate one or more entities associated with the application code that are determined to be trusted entities.

17. A method, comprising:

receiving, at a system, a request to install application code, the system configured to host one or more applications;

identifying by the system prior to an installation of the application code within the system one or more actions required to be performed by the system during the installation of the application code, where the one or more actions include accessing data stored within the system, where the data required to be accessed during the installation of the application code is separate from the application code to be installed within the system;

identifying, by the system, a developer of the application code; and

conditionally allowing, by the system, the installation of the application code within the system, based on a comparison of the one or more actions to be performed by the system during the installation of the application and the identified developer of the application code against one or more rules.

18. An apparatus, comprising:

a processor for;

receiving, at a system, a request to install application code, the system configured to host one or more applications;

identifying by the system prior to an installation of the application code within the system one or more actions required to be performed by the system during the installation of the application code, where the one or more actions include accessing data stored within the system, where the data required to be accessed during the installation of the application code is separate from the application code to be installed within the system;

identifying, by the system, a developer of the application code; and

conditionally allowing, by the system, the installation of the application code within the system, based on a comparison of the one or more actions to be performed by the system during the installation of the application and the identified developer of the application code against one or more rules.