公开(公告)号：US20230409724A1

公开(公告)日：2023-12-21

申请号：US18104275

申请日：2023-01-31

Applicant: Snowflake Inc.

Inventor： Damien Carru ,  Jeremy Yujui Chen ,  Mohamad Raja Gani Mohamad Abdul ,  William A. Pugh

IPC: G06F21/62

CPC classification number: G06F21/6218 ,  G06F21/629

Abstract: A data platform for developing and deploying a data application. The data platform receives from a first user the data application and provider granted privileges including a consumer usage privilege and a consumer access to data privilege. The data platform authorizes the second user to access the data platform based on one or more consumer account privileges included in a set of account privileges. The data platform authorizes the second user to execute the data application based on the consumer usage privilege. During execution, the data platform authorizes the data application to access the provider database object based on the consumer access to data privilege, and authorizes the data application to access the consumer database object based on a provider access to data privilege provided by the second user.

公开(公告)号：US20230403306A1

公开(公告)日：2023-12-14

申请号：US18053956

申请日：2022-11-09

Applicant: Snowflake Inc.

Inventor： Jeremy Yujui Chen ,  Unmesh Jagtap ,  William A. Pugh ,  Brian Smith ,  Xu Xu

IPC: H04L9/40

CPC classification number: H04L63/20

Abstract: A data platform for developing and deploying a user application within a unified security context. The data platform authorizes a first user to use an editor to access source code of a user application based on security policies of a security context and authorizes the first user to use an application and data manager to set usage privileges for a second user to use the user application based on the security policies of the security context. To provide the user application to the second user, the data platform deploys the user application by instantiating a User Defined Function (UDF) server and an application engine of the UDF server within the security context, instantiating the user application as an application of the application engine within the security context, and authorizing access by the user application to databased on the security policies of the security context.

公开(公告)号：US20230401326A1

公开(公告)日：2023-12-14

申请号：US18187031

申请日：2023-03-21

Applicant: Snowflake Inc.

Inventor： Damien Carru ,  Jeremy Yujui Chen ,  Pui Kei Johnston Chu ,  Scott C. Gray ,  Unmesh Jagtap ,  Mohamad Raja Gani Mohamad Abdul ,  William A. Pugh ,  Ahmed Waseef Shawkat ,  Xu Xu

IPC: G06F21/62 ,  G06F21/60

CPC classification number: G06F21/6218 ,  G06F21/604 ,  G06F2221/2141 ,  G06F2221/2113

Abstract: A data platform for managing an application as a first-class database object. The data object can include User Interface (UI) components. The data application can be shared by a provider account to a plurality of consumer accounts using a share object and based on grant commands. The consumer accounts can deploy and operate the UI component based on the share object.

公开(公告)号：US11750661B1

公开(公告)日：2023-09-05

申请号：US17934899

申请日：2022-09-23

Applicant: Snowflake Inc.

Inventor： Damien Carru ,  Jeremy Yujui Chen ,  Timothy S. Conkling ,  Thierry Cruanes ,  Benoit Dageville ,  Unmesh Jagtap ,  William A. Pugh ,  Shrikant Ravindra Shanbhag ,  Xu Xu

IPC: H04L9/40 ,  G06F16/955

CPC classification number: H04L63/20 ,  G06F16/955 ,  H04L63/102

Abstract: A data platform for managing an application as a first-class database object. The data platform includes at least one processor and a memory storing instructions that cause the at least one processor to perform operations including detecting a data request from a browser for a data object located on the data platform, executing a stored procedure, the stored procedure containing instructions that cause the at least one processor to perform additional operations including instantiating a User Defined Function (UDF) server, an application engine, and the application within a security context of the data platform based on a security policy determined by an owner of the data object. The data platform then communicates with the browser using the application engine as a proxy server.