Monitoring system and shared access permissions for a plurality of users

• US 9,785,782 B2
• Filed: 12/29/2014
• Issued: 10/10/2017
• Est. Priority Date: 04/01/2010
• Status: Active Grant

• Current Assignee: Salesforce.com, Inc.
• Original Assignee: Salesforce.com, Inc.
• Inventors: Bulumulla, Irandi, Cinarkaya, Bulent, Sebata-Dempster, Yurika, Sheth, Tripti, Warshavsky, Alex, Zotter, Brian
• Primary Examiner(s): Zand, Kambiz
• Assistant Examiner(s): Sanders, Stephen
• Application Number:
  US14/585,098
• Publication Number:
  US 20150286828A1
• Time in Patent Office: 1,016 Days
• Field of Search: 726 28
• CPC Class Codes: G06F 21/00 Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
• CPC Class Codes: G06F 21/604 Tools and structures for managing or administering access control systems
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: G06F 2221/2141 Access rights, e.g. capability lists, access control lists, access tables, access matrices

Abstract

In accordance with embodiments, there are provided mechanisms and methods for performing one or more actions based on determined access permissions for a plurality of users. These mechanisms and methods for performing one or more actions based on determined access permissions for a plurality of users can enable improved data collection and analysis, enhanced client knowledge of system access, etc.

Claims

1. A method comprising:

reporting accessibility of a plurality of users provided access via a portal to a plurality of client data objects stored in tangible memory, wherein the plurality of client data objects are grouped as a client data set, including;

identifying one or more group-based or role-based system permissions that give at least some users access to the client data objects in the client data set;

identifying one or more sharing rules that give at least some users access to shared client data objects in the client data set; and

for at least a subset of the client data objects in the client data set, generating data and at least commencing notifying a client using the data generated, of the group-based or role-based system permissions and the one or more sharing rules identified as giving to users access via the portal to the subset of the client data objects.

2. The method of claim 1,

wherein users are associated with at least one client of a system accessible via a portal and the system limits user access to the client data set.

3. The method of claim 1,

wherein the role-based system permissions include hierarchical role-based permissions.

4. The method of claim 1, further including:

identifying territory-based system permissions that give to at least some users access to the client data objects in the client data set;

wherein at least some users are associated with territories; and

generating the data to further notify the client of the territory-based system permissions that give to users access via the portal to the subset of the client data objects.

5. The method of claim 1, further including:

aggregating the group-based or role-based system permissions and sharing rules to report counts for the accessibility via the portal to the subset of the client data objects.

6. The method of claim 5, further including:

aggregating a number of users having the accessibility via the portal to the subset of the client data objects.

7. The method of claim 5, further including:

aggregating a number of user groups having the accessibility via the portal to the subset of the client data objects.

8. The method of claim 5, further including:

aggregating a number of the one or more sharing rules providing the accessibility via the portal to the subset of the client data objects.

9. The method of claim 1, further including:

summarizing the accessibility to contact and lead data objects included in the client data set.

10. The method of claim 1, further including:

summarizing the accessibility to report data objects included in the client data set.

11. The method of claim 1, further including:

summarizing application of the one or more sharing rules by first users associated with a first client with second users associated with a second client.

12. The method of claim 1, further including:

summarizing application of the one or more sharing rules by first users associated with a first client that share client data with second users associated with a second client, wherein the second client is a customer or partner of the first client.

13. A non-transitory computer readable storage medium, including computer program instructions that implement a method comprising:

reporting accessibility of a plurality of users provided access via a portal to a plurality of client data objects stored in tangible memory, wherein the plurality of client data objects are grouped as a client data set, including;

identifying one or more group-based or role-based system permissions that give at least some of users, access to the client data objects in the client data set;

identifying one or more sharing rules that give at least some users access to shared client data objects in the client data set; and

for at least a subset of the client data objects in the client data set, generating data and at least commencing notifying a client using the data generated, of the group-based or role-based system permissions and the one or more sharing rules identified as giving to users access via the portal to the subset of the client data objects.

14. The non-transitory computer readable storage medium of claim 13,

wherein users are associated with at least one client of a system accessible via a portal and the system limits user access to the client data set.

15. The non-transitory computer readable storage medium of claim 13,

wherein the role-based system permissions include hierarchical role-based permissions.

16. The non-transitory computer readable storage medium of claim 13, further including instructions to implement the method comprising:

identifying territory-based system permissions that give to at least some users access to the client data objects in the client data set;

wherein at least some users are associated with territories; and

generating the data to further notify the client of the territory-based system permissions that give to users access via the portal to the subset of the client data objects.

17. The non-transitory computer readable storage medium of claim 13, further including instructions to implement the method comprising:

aggregating the group-based or role-based system permissions and sharing rules to report counts for the accessibility via the portal to the subset of the client data objects.

18. The non-transitory computer readable storage medium of claim 13, further including instructions to implement the method comprising:

summarizing application of the one or more sharing rules by first users associated with a first client that share client data with second users associated with a second client, wherein the second client is a customer or partner of the first client.

19. A system comprising:

a processor, memory coupled to the processor, and computer program instructions stored in the memory that implement a method comprising;

reporting accessibility of a plurality of users provided access via a portal to a plurality of client data objects stored in tangible memory, wherein the plurality of client data objects are grouped as a client data set, including;

identifying one or more group-based or role-based system permissions that give at least some users access to the client data objects in the client data set;

identifying one or more sharing rules that give at least some users access to the client data objects in the client data set; and

for at least a subset of the client data objects in the client data set, generating data and at least commencing notifying a client using the data generated, of the group-based or role-based system permissions and the one or more sharing rules identified as giving to users access via the portal to the subset of the client data objects.

20. The system of claim 19, further including:

identifying territory-based system permissions that give to at least some users access to the client data objects in the client data set;

wherein at least some users are associated with territories; and

generating the data to further notify the client of the territory-based system permissions that give to users access via the portal to the subset of the client data objects.

21. The system of claim 19, further including:

aggregating the group-based or role-based system permissions and sharing rules to report counts for the accessibility via the portal to the subset of the client data objects.

22. The method of claim 21, further including:

aggregating a number of users having the accessibility via the portal to the subset of the client data objects.

23. The method of claim 21, further including:

aggregating a number of the one or more sharing rules providing the accessibility via the portal to the subset of the client data objects.

24. The system of claim 19, further including:

summarizing application of the one or more sharing rules by first users associated with a first client with second users associated with a second client.

25. The system of claim 19, further including:

summarizing application of the one or more sharing rules by first users associated with a first client that share client data with second users associated with a second client, wherein the second client is a customer or partner of the first client.