System, method and computer program product for portal user data access in a multi-tenant on-demand database system

• US 9,251,240 B2
• Filed: 04/16/2012
• Issued: 02/02/2016
• Est. Priority Date: 04/01/2010
• Status: Active Grant

• Current Assignee: Salesforce.com, Inc.
• Original Assignee: Salesforce.com, Inc.
• Inventors: Wu, Yongsheng, Vieira, Alfred, Jain, Punit
• Primary Examiner(s): LIN, SHEW FEN
• Application Number:
  US13/448,278
• Publication Number:
  US 20120203800A1
• Time in Patent Office: 1,387 Days
• Field of Search: 707/784, 707/805
• US Class Current: 1/1
• CPC Class Codes: G06F 16/284 Relational databases
• CPC Class Codes: G06F 21/6209 to a single file or object, e.g. in a secure envelope, encrypted and accessed using a key, or with access control rules appended to the object itself
• CPC Class Codes: G06F 2221/2117 User registration
• CPC Class Codes: G06F 2221/2119 Authenticating web pages, e.g. with suspicious links
• CPC Class Codes: G06F 2221/2143 Clearing memory, e.g. to prevent the data from being stolen

Abstract

In accordance with embodiments, there are provided mechanisms and methods for portal user data access in a multi-tenant on-demand database system. These mechanisms and methods for portal user data access in a multi-tenant on-demand database system can enable embodiments to provide portal-specific user accounts to the multi-tenant on-demand database system which have reduced configuration requirements than users directly accessing the multi-tenant on-demand database system. The ability of embodiments to provide portal-specific user accounts can reduce processing requirements of the database system.

Claims

1. A computer program product, comprising a non-transitory computer readable storage medium having a computer readable program code embodied therein, the computer readable program code adapted to cause a computer to be executed to implement a method, the method comprising:

providing a platform of a multi-tenant on-demand database system having hardware and software that is shared by multiple tenants of the multi-tenant on-demand database system;

providing, by the multi-tenant on-demand database system, multiple portals wherein each portal includes an interface specific to one of the multiple tenants of the multi-tenant on-demand database system by being branded for the one of the multiple tenants;

receiving, by the multi-tenant on-demand database system, a customization of the interface from the one of the multiple tenants of the multi-tenant on-demand database system;

storing, by the multi-tenant on-demand database system, the customization of the interface for the one of the multiple tenants;

registering a user associated with a tenant with the multi-tenant on-demand database system, wherein the registering is performed via the portal specific to the tenant such that the user appears to register with a service provided by the tenant;

storing a user object associated with the user, wherein the user object stores login information for use in authorizing a login to the portal by the user;

receiving, from the user via the portal, a request for a set of data associated with the multi-tenant on-demand database system;

identifying a data object of the multi-tenant on-demand database system that stores the set of data that is requested by the user;

determining whether the user object is referenced by the data object, wherein the user object is referenced by the data object by storing a unique identifier of the user object in the data object; and

allowing the user to access the data object via the portal in response to determining that the user object is referenced by the data object.

2. The computer program product of claim 1, wherein the portal is a web interface.

3. The computer program product of claim 2, wherein the user indirectly accesses the multi-tenant on-demand database system via the web interface.

4. The computer program product of claim 2, wherein at least one internal user object is stored for use by an internal user of the tenant in directly accessing the multi-tenant on-demand database system.

5. The computer program product of claim 1, wherein the user object is stored by the multi-tenant on-demand database system.

6. The computer program product of claim 1, wherein the user object stores a profile associated with a subscriber.

7. The computer program product of claim 1, wherein the data object is owned by the tenant of the multi-tenant on-demand database system.

8. The computer program product of claim 1, wherein the access includes reading the data object.

9. The computer program product of claim 1, further comprising storing another data object owned by the user.

10. The computer program product of claim 9, further comprising granting the tenant of the multi-tenant on-demand database system access to the other data object owned by the user.

11. The computer program product of claim 10, wherein the access is granted via a reference stored in the other data object to a group associated with the tenant.

12. The computer program product of claim 1, wherein the request for the set of data includes a request for the access to the data object, wherein the request includes a query for the data object.

13. The computer program product of claim 1, wherein the user object is indirectly referenced in the data object.

14. A method, comprising:

providing a platform of a multi-tenant on-demand database system having hardware and software that is shared by multiple tenants of the multi-tenant on-demand database system;

providing, by the multi-tenant on-demand database system, multiple portals wherein each portal includes an interface specific to one of the multiple tenants of the multi-tenant on-demand database system by being branded for the one of the multiple tenants;

receiving, by the multi-tenant on-demand database system, a customization of the interface from the one of the multiple tenants of the multi-tenant on-demand database system;

storing, by the multi-tenant on-demand database system, the customization of the interface for the one of the multiple tenants;

registering a user associated with a tenant with the multi-tenant on-demand database system, wherein the registering is performed via the portal specific to the tenant such that the user appears to register with a service provided by the tenant;

storing a user object associated with the user, wherein the user object stores login information for use in authorizing a login to the portal by the user;

receiving, from the user via the portal, a request for a set of data associated with the multi-tenant on-demand database system;

identifying a data object of the multi-tenant on-demand database system that stores the set of data that is requested by the user;

determining whether the user object is referenced by the data object, wherein the user object is reference by the data object by storing a unique identifier of the user object in the data object; and

allowing the user to access the data object via the portal in response to determining that the user object is referenced by the data object.

15. An apparatus, comprising:

a processor executing instructions to perform the steps of;

providing a platform of a multi-tenant on-demand database system having hardware and software that is shared by multiple tenants of the multi-tenant on-demand database system;

providing, by the multi-tenant on-demand database system, multiple portals wherein each portal includes an interface specific to one of the multiple tenants of the multi-tenant on-demand database system by being branded for the one of the multiple tenants;

receiving, by the multi-tenant on-demand database system, a customization of the interface from the one of the multiple tenants of the multi-tenant on-demand database system;

storing, by the multi-tenant on-demand database system, the customization of the interface for the one of the multiple tenants;

registering a user associated with a tenant with the multi-tenant on-demand database system, wherein the registering is performed via the portal specific to the tenant such that the user appears to register with a service provided by the tenant;

storing a user object associated with the user, wherein the user object stores login information for use in authorizing a login to the portal by the user;

receiving, from the user via the portal, a request for a set of data associated with the multi-tenant on-demand database system;

identifying a data object of the multi-tenant on-demand database system that stores the set of data that is requested by the user;

determining whether the user object is referenced by the data object, wherein the user object is reference by the data object by storing a unique identifier of the user object in the data object; and

allowing the user to access the data object via the portal in response to determining that the user object is referenced by the data object.