Lakshminarayanan Chidambaran - Sunnyvale CA, US Christopher Kantarjiev - Palo Alto CA, US James Stamos - Saratoga CA, US Peter Povinec - Redwood City CA, US
Assignee:
ORACLE INTERNATIONAL CORPORATION - REDWOOD SHORES CA
International Classification:
G06F007/00
US Classification:
707100000
Abstract:
An approach generates performance grades. A performance grade is a value or set of values that indicates the relative work performance offered by a resource, such as a server in a multi-node system, relative to other resources. Performance grades are used to dynamically allocate work within a multi-node computer system. For example, performance grades are used for connection-time balancing, and to direct a database connection request to a multi-node database instance that a performance grade indicates provides better performance. Performance grade deltas are generated that reflect the incremental change in performance grade for additional sessions or work. Performance deltas are used to direct incoming sessions, to more optimally balance workload, and to deal with logon storms where a large number of connect requests arrive in a very short time period.
Implementing Secure User-Defined Functions In A Multi-Tenant Database System
- Bozeman MT, US Peter Povinec - Redwood City CA, US Martin Hentschel - Seattle WA, US Robert Muglia - Mercer Island WA, US
International Classification:
G06F 21/62 G06F 16/245 G06F 16/22
Abstract:
Systems, methods, and devices for implementing secure user-defined function (UDF) in a multi-tenant database system are disclosed. A method includes receiving a grant to access a share object comprising usage functionality associated with a secure UDF to underlying data. The method includes accessing the share object using the grant. The method includes causing a share component to implement the secure view and the usage functionality associated with the secure UDF.
Container-Centric Access Control On Database Objects
- Bozeman MT, US Khalid Zaman Bijon - Santa Cruz CA, US Peter Povinec - Redwood City CA, US
International Classification:
G06F 21/62 G06F 16/27
Abstract:
Using container-centric managed access, an administrator is enabled to define a set of future grants for each object that will be created in the future in a container managed by the administrator. When a user creates a database object, the system checks the future grants to determine if any apply to the user, the database object, or the combination. Any applicable future grants are applied to the database object before the user is allowed to modify it. As a result, the administrator is enabled to control the privileges associated with the database object even before the database object is created, while restricting individual object owners from managing privileges on their owned objects.
Systems And Methods For Attachable-And-Detachable Database Sessions
Disclosed herein are systems and methods for attachable-and-detachable database sessions. In an embodiment, a database platform receives an attachment request from a client during a connection-specific database session that is set as a current database session for the client at the database platform, requesting that the client attach to an attachable-and-detachable database session that is maintained in data storage by the database platform. The database platform sets, in response to receiving the attachment request, the attachable-and-detachable database session as the current database session for the client at the database platform. The database platform determines that the client has detached from the attachable-and-detachable database session, and continues to maintain the attachable-and-detachable database session in the data storage.
- Bozeman MT, US Thierry Cruanes - San Mateo CA, US Martin Hentschel - San Mateo CA, US Peter Povinec - Redwood City CA, US
International Classification:
G06F 21/62 G06F 16/25
Abstract:
A method for sharing data in a multi-tenant database includes generating a share object in a first account comprising a share role. The method includes associating one or more access rights with the share role, wherein the one or more access rights indicate which objects in the first account are accessible based on the share object. The method includes granting, to a second account, cross-account access rights to the share role or share object in the first account. The method includes receiving a request from the second account to access data or services of the first account. The method further includes providing a response to the second account based on the data or services of the first account.
- Bozeman MT, US Thierry Cruanes - San Mateo CA, US Martin Hentschel - San Mateo CA, US Peter Povinec - Redwood City CA, US
International Classification:
G06F 21/62 G06F 16/25
Abstract:
A method of sharing data in a multi-tenant database includes inspecting, by a processing device of a multiple tenant database, a sharer account to determine a presence of a grant to a second role object, in a target account, of access rights to a first role object included in the sharer account. The method includes granting the second role object, in the target account, access rights to an alias object. The first role object having one or more grants to the one or more resources of the sharer account. The target account accesses the one or more resources using the one or more grants of the first role object and using the alias object without at least one of copying the one or more resources or transmitting the one or more resources.
Container-Centric Access Control On Database Objects
- Bozeman MT, US Khalid Zaman Bijon - Santa Cruz CA, US Peter Povinec - Redwood City CA, US
International Classification:
G06F 21/62 G06F 16/27
Abstract:
Using container-centric managed access, an administrator is enabled to define a set of future grants for each object that will be created in the future in a container managed by the administrator. When a user creates a database object, the system checks the future grants to determine if any apply to the user, the database object, or the combination. Any applicable future grants are applied to the database object before the user is allowed to modify it. As a result, the administrator is enabled to control the privileges associated with the database object even before the database object is created, while restricting individual object owners from managing privileges on their owned objects.
Loading And Unloading Data At An External Storage Location
- Bozeman MT, US Peter Povinec - Redwood City CA, US Saurin Shah - Kirkland WA, US
International Classification:
H04L 9/40 G06F 16/25
Abstract:
A command to load or unload data at a storage location is received. In response to the command, a storage integration object associated with the storage location is identified. The storage integration object identifies a cloud identity object that corresponds to a cloud identity that is associated with a proxy identity object corresponding to a proxy identity granted permission to access the storage location. The data is loaded or unloaded at the storage location by assuming the proxy identity.
Oracle Jun 2008 - Dec 2012
Architect In Access Management
Snowflake Computing Jun 2008 - Dec 2012
Founding Engineer
Oracle 2004 - 2008
Lead Developer In Application Server High-Availability
Oracle 1998 - 2004
Senior Developer In Database Networking
Education:
Carnegie Mellon University
The University of Alabama
Univerzita Komenského V Bratislave