中科微点-全球专利检索

  1. Login
  2. Sign Up

Search Results

102 records (took 0.03 seconds)

    AUTHORIZATION ON USER DEFINED ENTITY TYPES
    1.
    发明申请
    AUTHORIZATION ON USER DEFINED ENTITY TYPES 有权

    公开(公告)号：US20250111070A1

    公开(公告)日：2025-04-03

    申请号：US18375252

    申请日：2023-09-29

    Applicant: Snowflake Inc.

    Inventor： Damien Carru ,  Eric Karlson ,  Haojie Luan ,  Mohamad Raja Gani Mohamad Abdul ,  Frantisek Rolinek

    IPC: G06F21/62 ,  G06F21/60

    Abstract: Disclosed are techniques for providing scoped grants that provide object-specific authorization for privileges on user-defined objects. A scoped grant is a grant of a generalized, non-specific privilege that also limits the contexts in which that grant is applicable (i.e., scopes the grant) during authorization, where the “context” is defined by the user-defined object upon which the privilege is being performed. A user statement requesting a grant of a privilege on a user-defined object may be received. A scoped privilege that provides a grant of a base privilege identified from the user statement and limits application of the grant of the base privilege to the user-defined object is created. Scoping object information associated with the user-defined object is provided to an authorization engine, wherein the scoping information includes a set of properties identifying the user-defined object. A scoped grant is created based on the scoped privilege using the scoping object information.

    Sharing events and other metrics in native applications
    3.
    发明授权
    Sharing events and other metrics in native applications 有权

    公开(公告)号：US12153971B2

    公开(公告)日：2024-11-26

    申请号：US18243609

    申请日：2023-09-07

    Applicant: Snowflake Inc.

    Inventor： Damien Carru ,  Pui Kei Johnston Chu ,  Unmesh Jagtap ,  Xiaodi Ke ,  Haroldo Level ,  Subramanian Muralidhar ,  James Pan ,  Steven Parkes ,  Xie Xu ,  Tyson J. Hamilton

    IPC: G06F9/54 ,  G06F16/25

    Abstract: Disclosed is an execution information sharing system that duplicates execution information to a provider target (and other targets) as it is being loaded to a consumer target. A first log information object and a second log information object are generated. The first and second log information objects comprise information indicating a consumer target and information indicating a provider target respectively where execution information generated by an application shared with a consumer account of a data exchange is written. A first event unloader and a second event unloader are generated based on the first and second log information objects respectively, wherein the first and second event unloaders are both linked to the application using a mapping. In response to receiving execution information from the application, the execution information is forwarded to the consumer target and the provider target using the first event unloader and the second event unloader respectively.

    Fine-grained access control via database roles
    9.
    发明授权
    Fine-grained access control via database roles 有权

    公开(公告)号：US11822689B2

    公开(公告)日：2023-11-21

    申请号：US18109191

    申请日：2023-02-13

    Applicant: Snowflake Inc.

    Inventor： Damien Carru ,  Pui Kei Johnston Chu ,  Benoit Dageville ,  Shreyas Narendra Desai ,  Subramanian Muralidhar ,  Bowen Zhang

    IPC: G06F21/62 ,  G06F16/25 ,  G06F16/21

    CPC classification number: G06F21/6218 ,  G06F16/21 ,  G06F16/256 ,  G06F2221/2141

    Abstract: Embodiments of the present disclosure relate to sharing database roles using hidden roles. A database role may be generated within a database container having a plurality of data objects, wherein the database role exists exclusively within the database container. A set of grants to a particular subset of the plurality of data objects of the database container may be assigned to the database role and the database role may be granted to the share object. The share object is mounted within a consumer account to generate an imported database container within the consumer account, the imported database container including an imported copy of the database role. The imported copy of the database role may be granted to each of one or more account level roles of the consumer account to share the particular subset of the plurality of data objects without creating proxy objects in the consumer account that represent the particular subset of the plurality of data objects.

    Shared object discovery techniques
    10.
    发明授权
    Shared object discovery techniques 有权

    公开(公告)号：US11809586B2

    公开(公告)日：2023-11-07

    申请号：US17980427

    申请日：2022-11-03

    Applicant: Snowflake Inc.

    Inventor： Damien Carru ,  Jeremy Yujui Chen ,  Pui Kei Johnston Chu ,  Benoit Dageville ,  Subramanian Muralidhar

    IPC: G06F7/00 ,  G06F16/00 ,  G06F21/62 ,  G06F16/21 ,  G06F16/2455

    CPC classification number: G06F21/6218 ,  G06F16/213 ,  G06F16/24552

    Abstract: A consumer account may invoke an operation referencing a set of shared objects stored within a database of a provider account using an imported database that makes the set of shared objects available within the consumer account. A call context of the operation may be updated to cache the imported database, which references a share created from the provider account database, the share having grants to the set of shared objects. One or more database level objects may be discovered in a context of the share and each role granted to the share may be obtained based on the one or more database level objects. Whether any role granted to the share has access to any of the set of shared objects may be determined and the operation may be executed for each of the set of shared objects to which any role granted to the share has access.

Patent Agency Ranking