Patent ID: 8706772
Filing Date: 2014-04-22
Classification: G06F

Abstract:
1. A computer program product comprising a machine-readable medium storing instructions that, when executed by at least one programmable processor, cause the at least one programmable processor to perform operations comprising: defining a plurality of partitions in a database for a multi-tenant computing system provided on one or more processors, each partition of the plurality of partitions corresponding to only one business tenant of a set of business tenants supported by the multi-tenant system; storing, in the database, shared content that is shared among and accessible to all tenants of the multi-tenant computing system; storing tenant content for each business tenant in the corresponding partition of the plurality of partitions of the database, at least a portion of the tenant content being unique to and associated with the associated business tenant; and generating, as a result of a code check executed at run time, one or more errors to prevent tenant content associated with a first business tenant of the set of business tenants from being accessed by a second business tenant of the set of business tenants, the code check identifying application code within the multi-tenant computing system that comprises a database coding construct that fails to forbid cross-tenant access by the second business tenant to tenant content associated with the first business tenant, the code check comprising determining the existence of at least one of a CLIENT SPECIFIED addition; one or more of an IMPORT, an EXPORT, and a DELETE with a CLIENT addition; usage of Native SQL; a write access into a system field SY-MANDT; and usage of a parameter IV_CLIENT in a method attach that mediates access to one or more shared memory objects.