Method and system for allowing access to developed applications via a multi-tenant on-demand database service

• US 9,171,034 B2
• Filed: 04/19/2010
• Issued: 10/27/2015
• Est. Priority Date: 10/04/2006
• Status: Active Grant

• Current Assignee: Salesforce.com, Inc.
• Original Assignee: Salesforce.com, Inc.
• Inventors: Weissman, Craig
• Primary Examiner(s): MITCHELL, JASON D
• Application Number:
  US12/763,078
• Publication Number:
  US 20100205595A1
• Time in Patent Office: 2,017 Days
• Field of Search: None
• US Class Current: 1/1
• CPC Class Codes: G06F 11/3604 Software analysis for verifying properties of programs byte-code verification G06F9/44589
• CPC Class Codes: G06F 11/3664 Environments for testing or debugging software
• CPC Class Codes: G06F 16/2365 Ensuring data consistency and integrity
• CPC Class Codes: G06F 16/24 Querying
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: G06F 21/6227 where protection concerns the structure of data, e.g. records, types, queries
• CPC Class Codes: G06F 8/30 Creation or generation of source code
• CPC Class Codes: G06F 8/60 Software deployment

Abstract

In accordance with embodiments, there are provided mechanisms and methods for allowing access to developed applications via a multi-tenant on-demand database service, in a controlled environment. These mechanisms and methods for providing such access can enable embodiments to provide additional control over the development process as well as the access of such developed applications. The ability of embodiments to provide such additional control may lead to an improved application development framework, etc.

Claims

1. A method, comprising:

receiving developed applications at a system, wherein at least one of the developed applications is an application developed using another system separate from the system receiving the developed applications;

providing access to the developed applications by the system to users of the system;

limiting by the system a plurality of aspects of the developed applications, the plurality of aspects including;

a number of electronic mail messages sent utilizing the developed applications,

an amount of resources made available to each of the developed applications,

service calls out by the developed applications to other systems external to the system,

a number of queries made utilizing the developed applications,

a number of rows processed,

a number of transaction statements,

a duration of processing by the developed applications, and

a number of modification statements to a database made utilizing the developed applications; and

disallowing publication of one or more of the developed applications to the system in response to a determination that the one or more developed applications violate one or more predetermined policies.

2. The method of claim 1, wherein the system limits one or more additional aspects of the developed applications, including at least one of a number of columns of a database, a number of queries to the database, a number of rows returned by queries, a number of database statements, a number of script statements between database statements, a total number of uncommitted rows since a last transaction control statement, and a total number of script statements since a last database call.

3. The method of claim 1, wherein access to the developed applications by the users of the system is controlled.

4. The method of claim 3, wherein a single instance of each developed application is instantiated among a plurality of the users of the system.

5. The method of claim 1, and further comprising compiling the developed applications.

6. The method of claim 5, wherein the compiled applications are capable of being processed by a run-time interpreter of the system.

7. The method of claim 1, wherein the resources include storage.

8. The method of claim 1, wherein the resources include bandwidth.

9. The method of claim 1, wherein the system imposes a requirement of the system that the developed applications be tested.

10. The method of claim 9, wherein the developed applications are automatically tested by the system.

11. The method of claim 9, wherein testing the developed applications includes validating the developed applications.

12. The method of claim 1, wherein the developed applications include program language instructions.

13. The method of claim 1, wherein the system limits web service calls made per request by the developed applications.

14. The method of claim 1, wherein the system applies at least one limit on the developed applications on a per-time-period basis.

15. The method of claim 1, wherein the developed applications include at least one programming language instruction for which a set of instructions are used to perform a set of multi-object manipulations at the system responsive to a single transaction.

16. The method of claim 1, wherein the system limits a duration of processing.

17. A non-transitory machine-readable medium carrying one or more sequences of instructions which, when executed by one or more processors, is configured to cause the one or more processors to carry out the steps of:

receiving developed applications at a system, wherein at least one of the developed applications is an application developed using another system separate from the system receiving the developed applications;

providing access to the developed applications by the system to users of the system;

limiting by the system a plurality of aspects of the developed applications, the plurality of aspects including;

a number of electronic mail messages sent utilizing the developed applications,

an amount of resources made available to each of the developed applications,

service calls out by the developed applications to other systems external to the system,

a number of queries made utilizing the developed applications,

a number of rows processed,

a number of transaction statements,

a duration of processing by the developed applications, and

a number of modification statements to a database made utilizing the developed applications; and

disallowing publication of one or more of the developed applications to the system in response to a determination that the one or more developed applications violate one or more predetermined policies.

18. An apparatus, comprising:

at least one processor; and

one or more stored sequences of instructions which, when executed by the at least one processor, cause the at least one processor to carry out the steps of;

receiving developed applications at a system, wherein at least one of the developed applications is an application developed using another system separate from the system receiving the developed applications;

providing access to the developed applications by the system to users of the system;

limiting by the system a plurality of aspects of the developed applications, the plurality of aspects including;

a number of electronic mail messages sent utilizing the developed applications,

an amount of resources made available to each of the developed applications,

service calls out by the developed applications to other systems external to the system,

a number of queries made utilizing the developed applications,

a number of rows processed,

a number of transaction statements,

a duration of processing by the developed applications, and

a number of modification statements to a database made utilizing the developed applications; and

disallowing publication of one or more of the developed applications to the system in response to a determination that the one or more developed applications violate one or more predetermined policies.