Methods and Systems for Controlling Access to Custom Objects in a Database

• US 20160267294A1
• Filed: 05/20/2016
• Published: 09/15/2016
• Est. Priority Date: 10/03/2006
• Status: Active Grant

• Current Assignee: Salesforce.com, Inc.
• Original Assignee: Salesforce.com, Inc.
• Inventors: OLIVER, Kevin, DOSHI, Kedar, WEISSMAN, Craig, JASIK, Benji
• Granted Patent: US 10,410,013 B2
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: G06F 16/176 Support for shared access to files; File sharing support
• CPC Class Codes: G06F 16/289 Object oriented databases
• CPC Class Codes: G06F 21/6227 where protection concerns the structure of data, e.g. records, types, queries
• CPC Class Codes: Y10S 707/99933 Query processing, i.e. searching
• CPC Class Codes: Y10S 707/99939 Privileged access

Abstract

In embodiments, methods and systems for controlling access to custom objects are provided. These techniques for controlling access to custom objects can enable embodiments to utilize a key for the protection of the security of data that is to remain private while not compromising efficiency of a query. The key for a requested custom object is identified and then used so that only an appropriate portion of a custom entity share table is searched to locate access information. It is then determined whether the user can access at least a portion of the custom object, and the appropriate and allowed data is sent to the user.

Claims

1. A method of controlling access to custom objects from a custom entity share table of a database, the method including:

receiving a user request to access a custom object of a particular custom object type;

identifying a particular group to which the user belongs with a particular tenant id responsive to the user request;

determining whether the particular group has access to the particular custom object type requested; and

accessing and returning at least some custom objects in the custom entity share table based at least on the particular tenant id and the particular custom object type to select the custom objects responsive to the user request.

2. The method of claim 1, wherein the custom entity share table further includes fields for the tenant id and object type stored according to the custom objects.

3. The method of claim 1, further comprising a custom entity access table that stores fields for the tenant id and object type linked to the custom objects.

4. A system that controls access to custom objects of a database from a custom entity share table, the system including:

one or more processors coupled to memory, the memory loaded with computer instructions that, when executed on the processors, implement actions including;

receiving a user request to access a custom object of a particular custom object type;

identifying a particular group to which the user belongs with a particular tenant id responsive to the user request;

determining whether the particular group has access to the particular custom object type requested; and

accessing and returning at least some custom objects in the custom entity share table based at least on the particular tenant id and the particular custom object type to select the custom objects responsive to the user request.

5. The system of claim 4, wherein the custom entity share table further includes fields for the tenant id and object type stored according to the custom objects.

6. The system of claim 4, further comprising a custom entity access table that stores fields for the tenant id and object type linked to the custom objects.

7. A non-transitory machine-readable storage medium storing a plurality of instructions for programming one or more processors to control access to custom objects from a custom entity share table, the instructions, when executed on the processors, implementing actions including:

receiving a user request to access a custom object of a particular custom object type;

identifying a particular group to which the user belongs with a particular tenant id responsive to the user request;

determining whether the particular group has access to the particular custom object type requested; and

accessing and returning at least some custom objects in the custom entity share table based at least on the particular tenant id and the particular custom object type to select the custom objects responsive to the user request.

8. The non-transitory computer readable medium of claim 7, wherein the custom entity share table further includes fields for the tenant id and object type stored according to the custom objects.

9. The non-transitory computer readable medium of claim 7, further implementing a custom entity access table that stores fields for the tenant id and object type linked to the custom objects.

10. A computer-implemented method of controlling access to custom objects from a custom entity share table of a database, the method including:

receiving a user request for access to custom objects of a particular custom object type;

identifying a particular group to which the user belongs based on a tenant identifier in response to the user request;

determining whether the particular group has access to the particular custom object type requested, including;

when the user request is selective, accessing the custom entity share table based on the tenant identifier; and

when the user request is unselective, accessing the custom entity share table based on a user group identifier; and

responsive to the user request, returning at least some custom objects in the custom entity share table based at least on the tenant identifier or the group identifier and the particular custom object type.

11. The method of claim 10, further including storing one or more fields for the tenant identifier and particular custom object type in the custom entity share table with the custom objects.

12. The method of claim 10, further including storing one or more fields for the tenant identifier and particular custom object type in a custom entity access table that is linked to the custom objects.

13. The method of claim 10, wherein the custom objects are accessed using a key prefix.

14. A system including one or more processors coupled to memory, the memory loaded with computer instructions to control access to custom objects of a custom entity share table, the instructions, when executed on the processors, implement actions comprising:

receiving a user request for access to custom objects of a particular custom object type;

identifying a particular group to which the user belongs based on a tenant identifier in response to the user request;

determining whether the particular group has access to the particular custom object type requested, including;

when the user request is selective, accessing the custom entity share table based on the tenant identifier; and

when the user request is unselective, accessing the custom entity share table based on a user group identifier; and

responsive to the user request, returning at least some custom objects in the custom entity share table based at least on the tenant identifier or the group identifier and the particular custom object type.

15. The system of claim 14, further implementing actions storing one or more fields for the tenant identifier and particular custom object type in the custom entity share table with the custom objects.

16. The system of claim 14, further implementing actions storing one or more fields for the tenant identifier and particular custom object type in a custom entity access table that is linked to the custom objects.

17. The system of claim 14, wherein the custom objects are accessed using a key prefix.

18. A non-transitory computer readable storage medium impressed with computer program instructions to control access to custom objects of a custom entity share table, the instructions, when executed on the processors, implement a method comprising:

receiving a user request for access to custom objects of a particular custom object type;

identifying a particular group to which the user belongs based on a tenant identifier in response to the user request;

determining whether the particular group has access to the particular custom object type requested, including;

when the user request is selective, accessing the custom entity share table based on the tenant identifier; and

when the user request is unselective, accessing the custom entity share table based on a user group identifier; and

responsive to the user request, returning at least some custom objects in the custom entity share table based at least on the tenant identifier or the group identifier and the particular custom object type.

19. The non-transitory computer readable storage medium of claim 18, implementing the method further comprising storing one or more fields for the tenant identifier and particular custom object type in a custom entity access table that is linked to the custom objects.

20. The non-transitory computer readable storage medium of claim 18, wherein the custom objects are accessed using a key prefix.