-
公开(公告)号:US20230135712A1
公开(公告)日:2023-05-04
申请号:US17980427
申请日:2022-11-03
Applicant: Snowflake Inc.
Inventor: Damien Carru , Jeremy Yujui Chen , Pui Kei Johnston Chu , Benoit Dageville , Subramanian Muralidhar
IPC: G06F21/62 , G06F16/2455 , G06F16/21
Abstract: A consumer account may invoke an operation referencing a set of shared objects stored within a database of a provider account using an imported database that makes the set of shared objects available within the consumer account. A call context of the operation may be updated to cache the imported database, which references a share created from the provider account database, the share having grants to the set of shared objects. One or more database level objects may be discovered in a context of the share and each role granted to the share may be obtained based on the one or more database level objects. Whether any role granted to the share has access to any of the set of shared objects may be determined and the operation may be executed for each of the set of shared objects to which any role granted to the share has access.
-
公开(公告)号:US20250045444A1
公开(公告)日:2025-02-06
申请号:US18924445
申请日:2024-10-23
Applicant: Snowflake Inc.
Inventor: Damien Carru , Jeremy Yujui Chen , Mohamad Raja Gani Mohamad Abdul , William A. Pugh
IPC: G06F21/62
Abstract: A data platform for developing and deploying a data application. The data platform receives from a first user the data application and provider granted privileges including a consumer usage privilege and a consumer access to data privilege. The data platform authorizes the second user to access the data platform based on one or more consumer account privileges included in a set of account privileges. The data platform authorizes the second user to execute the data application based on the consumer usage privilege. During execution, the data platform authorizes the data application to access the provider database object based on the consumer access to data privilege, and authorizes the data application to access the consumer database object based on a provider access to data privilege provided by the second user.
-
公开(公告)号:US11983292B2
公开(公告)日:2024-05-14
申请号:US18167950
申请日:2023-02-13
Applicant: Snowflake Inc.
Inventor: Damien Carru , Jeremy Yujui Chen , Pui Kei Johnston Chu , Thierry Cruanes , Istvan Cseri , Benoit Dageville , Unmesh Jagtap , Subramanian Muralidhar
CPC classification number: G06F21/6227 , G06F9/44505 , G06Q30/06 , G06F2221/2141
Abstract: Embodiments of the present disclosure enable users of a data sharing system to build native applications that can be shared with other users of the data sharing system. The native applications can be published and discovered in the data sharing system like any other data listing, and consumers can install them in their local data sharing system account to serve their data processing needs. A provider may define an installation script for installing an application and create a share object to which the installation script may be attached. In response to an imported database being created in a consumer account based on the share object, a native application framework may automatically execute the installation script in the consumer account and may create a set of database roles to manage execution of the application in the consumer account.
-
公开(公告)号:US11803373B1
公开(公告)日:2023-10-31
申请号:US18169819
申请日:2023-02-15
Applicant: Snowflake Inc.
Inventor: Damien Carru , Jeremy Yujui Chen , Pui Kei Johnston Chu , Benoit Dageville , Scott C. Gray , Unmesh Jagtap , Subramanian Muralidhar
CPC classification number: G06F8/71 , G06F8/658 , G06F9/4488
Abstract: Methodologies for upgrading and patching an in-database application package and its application instances. A data platform determines a number of objects of an application instance running on the data platform at a previous version level of an application package of the application instance. In response to determining the number of objects of the application package running on the data platform at the previous version level of the application package is one or more, the data platform continues determining the number of objects running on the data platform at a previous version level of the application package. In response to determining the number of objects of the application instance running on the data platform at the previous version level of the application package is none, the data platform upgrades the application instance to the new version of the application package.
-
公开(公告)号:US11593509B1
公开(公告)日:2023-02-28
申请号:US17885335
申请日:2022-08-10
Applicant: Snowflake Inc.
Inventor: Damien Carru , Jeremy Yujui Chen , Pui Kei Johnston Chu , Thierry Cruanes , Istvan Cseri , Benoit Dageville , Unmesh Jagtap , Subramanian Muralidhar
Abstract: Embodiments of the present disclosure enable users of a data sharing system to build native applications that can be shared with other users of the data sharing system. The native applications can be published and discovered in the data sharing system like any other data listing, and consumers can install them in their local data sharing system account to serve their data processing needs. A provider may define an installation script for installing an application and create a share object to which the installation script may be attached. In response to an imported database being created in a consumer account based on the share object, a native application framework may automatically execute the installation script in the consumer account and may create a set of database roles to manage execution of the application in the consumer account.
-
公开(公告)号:US11436362B1
公开(公告)日:2022-09-06
申请号:US17535529
申请日:2021-11-24
Applicant: Snowflake Inc.
Inventor: Damien Carru , Jeremy Yujui Chen , Pui Kei Johnston Chu , Thierry Cruanes , Istvan Cseri , Benoit Dageville , Unmesh Jagtap , Subramanian Muralidhar
Abstract: Embodiments of the present disclosure enable users of a data sharing system to build native applications that can be shared with other users of the data sharing system. The native applications can be published and discovered in the data sharing system like any other data listing, and consumers can install them in their local data sharing system account to serve their data processing needs. A provider may define an installation script for installing an application and create a share object to which the installation script may be attached. In response to an imported database being created in a consumer account based on the share object, a native application framework may automatically execute the installation script in the consumer account and may create a set of database roles to manage execution of the application in the consumer account.
-
公开(公告)号:US12153698B2
公开(公告)日:2024-11-26
申请号:US18104275
申请日:2023-01-31
Applicant: Snowflake Inc.
Inventor: Damien Carru , Jeremy Yujui Chen , Mohamad Raja Gani Mohamad Abdul , William A. Pugh
IPC: G06F21/62
Abstract: A data platform for developing and deploying a data application. The data platform receives from a first user the data application and provider granted privileges including a consumer usage privilege and a consumer access to data privilege. The data platform authorizes the second user to access the data platform based on one or more consumer account privileges included in a set of account privileges. The data platform authorizes the second user to execute the data application based on the consumer usage privilege. During execution, the data platform authorizes the data application to access the provider database object based on the consumer access to data privilege, and authorizes the data application to access the consumer database object based on a provider access to data privilege provided by the second user.
-
公开(公告)号:US20240281557A1
公开(公告)日:2024-08-22
申请号:US18652655
申请日:2024-05-01
Applicant: SNOWFLAKE INC.
Inventor: Damien Carru , Jeremy Yujui Chen , Pui Kei Johnston Chu , Thierry Cruanes , Istvan Cseri , Benoit Dageville , Unmesh Jagtap , Subramanian Muralidhar
CPC classification number: G06F21/6227 , G06F9/44505 , G06Q30/06 , G06F2221/2141
Abstract: Embodiments of the present disclosure related to sharing applications within a data sharing platform. An example method includes replicating a database from a provider account of a data sharing platform to a consumer account of the data sharing platform. The method further includes executing an installation script within the consumer account to install an application in the consumer account of the data sharing platform responsive to the replicating. The method further includes creating, by a processing device, a set of database roles to manage execution of the application in the consumer account, wherein one or more of the set of database roles determine access privileges granted to the application for accessing the database inside the consumer account. The application is to perform a data processing service relative to a data asset in the database.
-
公开(公告)号:US20240281245A1
公开(公告)日:2024-08-22
申请号:US18470585
申请日:2023-09-20
Applicant: Snowflake Inc.
Inventor: Damien Carru , Jeremy Yujui Chen , Pui Kei Johnston Chu , Benoit Dageville , Scott C. Gray , Unmesh Jagtap , Subramanian Muralidhar
CPC classification number: G06F8/71 , G06F8/658 , G06F9/4488
Abstract: Methodologies for upgrading and patching an in-database application package and its application instances. A data platform determines a number of objects of an application instance running on the data platform at a previous version level of an application package of the application instance. In response to determining the number of objects of the application package running on the data platform at the previous version level of the application package is one or more, the data platform continues determining the number of objects running on the data platform at a previous version level of the application package. In response to determining the number of objects of the application instance running on the data platform at the previous version level of the application package is none, the data platform upgrades the application instance to the new version of the application package.
-
公开(公告)号:US20240259387A1
公开(公告)日:2024-08-01
申请号:US18160801
申请日:2023-01-27
Applicant: Snowflake Inc.
Inventor: Damien Carru , Jeremy Yujui Chen , Laxman Mamidi , Bowen Zhang
CPC classification number: H04L63/105 , G06F21/6218
Abstract: Disclosed herein are systems and methods for managing database-level roles for data sharing. In an embodiment, a database system shares a database that resides in a data-provider account with a data-consumer account. The provider-side database includes a provider-side database-level role. The database system receives a request to grant the provider-side database-level role to a consumer-side account-level role in the data-consumer account. The database system responsively grants a hidden provider-side database-level role in the data-provider account to a hidden consumer-side database-level role in the data-consumer account, where the hidden provider-side database-level role had been granted to the provider-side database-level role, and grants the hidden consumer-side database-level role to the consumer-side account-level role in the data-consumer account.
-
-
-
-
-
-
-
-
-