Database system dashboard snapshotting

A user interface generation message may be sent from a database system to a client machine via a network. The user interface generation message may include instructions for presenting a database dashboard on a display screen at the client machine. The database dashboard may include a plurality of user interface components that each presents a respective view of information stored in a database. A user interface component selection message may be received from the client machine, identifying one or more of the user interface components. A visual snapshot of the identified user interface components may be created at the database system.

FIELD OF TECHNOLOGY

This patent document relates generally to database systems and more specifically to client-server communication for interacting with database systems.

BACKGROUND

“Cloud computing” services provide shared resources, applications, and information to computers and other devices upon request. In cloud computing environments, services can be provided by one or more servers accessible over the Internet rather than installing software locally on in-house computer systems. Users can interact with cloud computing services to undertake a wide range of tasks.

One use of a cloud computing system is a network-accessible database system. A database system associated with a cloud computing service provider may store information associated with various organizations accessing computing services via the service provider.

Another use of a cloud computing system is interacting with database objects. A user interface may provide a vehicle for viewing and editing information stored in a database. The user interface may be presented in a webpage accessible via a web browser. Alternatively, or additionally, a native application or other access mechanism may be employed.

DETAILED DESCRIPTION

According to various embodiments, techniques and mechanisms described herein provide for a database system snapshotting system. A server may transmit to a client machine a user interface, which may represent information stored in a database system. The client machine may identify one or more user interface components to include in a snapshot, and may then transmit to the server a snapshot configuration message identifying those user interface components. The server may generate and transmit a user interface based on the snapshot configuration message.

Consider the example of Alexandra, a user of an on-demand computing services environment. Alexandra employs the on-demand computing services environment to access and edit information. In many situations, Alexandra would like to share views of information she is accessing with her colleagues or clients. However, Alexandra would like to share not only information stored in a database, but rather Alexandra's user-configurable view of such information, which may be selected and aggregated to reflect Alexandra's goals and perspectives.

According to conventional techniques, Alexandra could capture an image-based screenshot of specific information presented on a display screen on Alexandra's computer. However, such an approach requires significant manual effort on Alexandra's part. Further, such conventional approaches may fail to capture information that is included in the user interface but not necessarily presented on the display screen at the time of image capture. Finally, such an approach may include information Alexandra does not wish to capture, such as parts of the user interface that are not relevant to the sharing operation.

According to techniques and mechanisms described herein, Alexandra can select one or more user interface components to share. The server will then generate a snapshot suitable for sharing. Alexandra may then share the snapshot in one or more of a variety of ways. Such techniques and mechanisms may allow Alexandra to create and access customized views of data stored in a database, and then shared those customized views with colleagues and others in an efficient and seamless manner.

FIG. 1illustrates an example of an overview method100for user interface snapshotting, performed in accordance with one or more embodiments. The method100may be performed at a client device and a server system in communication. For example, the method100may be performed at one or more of the systems and devices shown inFIG. 4,FIG. 5, andFIG. 6.

A user interface is transmitted from the server to the client machine at102. According to various embodiments, the user interface may be any interface suitable for accessing information transmitted from a server. For example, the user interface may be used to access information stored in a database accessible via the server. The database may be accessible in the context of an on-demand computing services environment configured to provide computing services to a variety of organizations via the internet.

A user interface snapshot configuration message is transmitted from the client machine to the server at104. In some implementations, the user interface snapshot configuration message may be generated based on user input. For example, a user at the client machine may identify one or more components within the user interface for generating a snapshot. As another example, the user may identify one or more configuration parameters associated with snapshot generation. Additional details related to the generation of a user interface snapshot configuration message are discussed with respect to the method200shown inFIG. 2.

A user interface screenshot is generated at106based on the user interface snapshot configuration message. In some implementations, the user interface snapshot may be generated by determining a view of one or more user interface components transmitted to the client machine at102. The view may be generated by selecting the user interface components identified in the user interface snapshot configuration message, subject to any configuration parameters associated with snapshot generation. Additional details related to the generation of a user interface snapshot are discussed with respect to the method300shown inFIG. 3.

FIG. 7andFIG. 8illustrate examples of a graphical user interface700configured in accordance with one or more embodiments. The graphical user interface700illustrates the generation of a graphical user interface snapshot in accordance with one or more embodiments of techniques and mechanisms described herein. The user interface700provides a view of information stored in a database, such as a marketing spend and return analysis. For instance, the graphical user interface700may be a web page presented in a web browser.

The graphical user interface700includes a number of user interface components, such as the user interface component A702, the user interface component B704, the user interface component C706, the user interface component D708, and the user interface component E710. A user interface component can itself include other user interface components, such as the user interface components E1712, E2714, E3716, E4718, and E5720included in the user interface component E710. Each user interface component may be implemented as, for example, a <div>, <iframe>, or other such tag in an HTML context.

In particular embodiments, one or more of the user interface components may present information stored in a database. For example, the user interface component E710may display marketing information, while the user interface components E1712, E2714, E3716, E4718, and E5720may display marketing information associated with different communication channels.

In some embodiments, user interface components may be selected automatically at the server. Alternatively, or additionally, one or more of the user interface components may be selected based on user input. For instance, a user may identify which of the marketing channels for which to generate the user interface components E1712, E2714, E3716, E4718, and E5720.

The user interface702also includes a share button722by which a user can provide user input indicating a request to generate a user interface snapshot in accordance with techniques and mechanisms described herein. When a user indicates a request to create a user interface snapshot and then selects a user interface component, for instance by clicking on it, a snapshot is created and presented

In some implementations, a view of the snapshot may be created, for instance as a thumbnail. For example, the user interface snapshot thumbnail808shown inFIG. 8corresponds with the user interface component710. The user interface snapshot thumbnail808may be a smaller version of the actual snapshot. For instance, the user interface snapshot thumbnail808may have a smaller resolution and/or be cropped to present only part of the actual snapshot.

The user interface snapshot overlay802may then be used to perform actions related to the snapshot, such as annotating the snapshot with text, identifying one or more recipients of the snapshot, identifying one or more channels through which to send the snapshot, and/or sending the snapshot to the identified recipients.

The user interface snapshot overlay802includes a medium window804. A user may use the medium window804to identify a medium through which to send the snapshot, such as email or one or more messaging services.

The user interface snapshot overlay802also includes a destination window806. A user may use the destination window806to identify one or more recipients of the snapshot. A recipient may be an individual, a group of individuals, a storage location, a device, or any other addressable destination for transmitting the snapshot.

A message box is shown at808. A user may use the message box to include a message along with the snapshot. For example, the user may characterize the snapshot, or ask a question about it. As another example, the user may conduct a conversation about the snapshot, for instance via a messaging service.

In some implementations, a snapshot may include one or more user interface components that are not actually present on the screen. For example, inFIG. 7, the user interface component E710includes a scrollable view of different user interface components included within the user interface component E710, such as the user interface components E1712, E2714, E3716, E4718, and E5720. By selecting the user interface component E710, the user interface component720may be included in the snapshot even though it is not fully presented on the display screen. In addition, one or more user interface components not shown at all inFIG. 7, such as user interface components included within the user interface component E but not currently displayed on the display screen, may also be included in the snapshot.

FIG. 2illustrates an example of a client-side method200for user interface snapshot generation, performed in accordance with one or more embodiments. The method200may be performed at a client device and a server system in communication. For example, the method200may be performed at one or more of the systems and devices shown inFIG. 4,FIG. 5, andFIG. 6. The method200may be performed in conjunction with one or more other methods described herein, such as the method100shown inFIG. 1and/or the method300shown inFIG. 3.

A request for a user interface is transmitted to a server at202. In some implementations, the request for the user interface may be generated as part of the interaction of a user with a remote database. For example, the user may transmit a request to access a user interface for presenting information about one or more objects stored in a database.

In some embodiments, the request for the user interface may be generated as part of the interaction of a user with an on-demand computing services environment. For instance, the user may access a user interface in association with accessing services such as customer relations management operations, customer sales management operations, customer service management operations, marketing operations, or other such services.

A user interface generation message is received from the server at204. According to various embodiments, the user interface generation message may include any information involved in generating the requested user interface at the client machine. In some configurations, more than one user interface generation message may be received.

In some implementations, the user interface generation message may include information such as data retrieved from a database. Such information may include, for instance, data values associated with data fields included within database objects.

In some implementations, the user interface generation message may include presentation and control information such as HyperText Markup Language (HTML) tags, Cascading Style Sheet (CSS) tags, Javascript computer programming language instructions, and other such information.

The user interface is generated at the client machine at206. In some implementations, the user interface may be generated via a native application. Alternatively, the user interface may be generated in a web browser.

One or more components included in the user interface are identified at208. In some implementations, user interface components may be identified by selecting them with a pointing device such as a mouse. Alternatively, or additionally, user interface components presented on a touch screen may be identified by selecting them via the touch interface.

In some configurations, a user interface may include a selection affordance to indicate that the provided user input identifies component selection and not some other form of user input. For example, the selection affordance may be a button in a bar associated with the user interface component. As another example, the selection affordance may be a toggle switch for the user interface as a whole.

One or more configuration parameters for snapshot generation are identified at210. According to various embodiments, the one or more configuration parameters may include any information for instructing the server as to how to generate the snapshot based on the identified user interface components. For example, a configuration parameter may specify a grid in which to lay out a set of user interface components. As another example, a configuration parameter may specify an image size or resolution associated with the generated snapshot. As yet another example, a configuration parameter may specify one or more formatting options such as color schemes.

In some embodiments, a configuration parameter may specify a filter applied to a dashboard to apply context to a user interface component. For example, a configuration parameter may specify one or more characteristics for generating a user interface component, such as a date range, a user segment, or an organization.

In some implementations, a configuration parameter may be specified by a user, for instance via a selection interface or a configuration file. Alternatively, or additionally, a configuration parameter may be determined at the server. For instance, a user, organization, or user interface component may be associated with one or more default configuration parameters, which may or may not be editable by a user.

A user interface snapshot configuration message is transmitted to the server at212. According to various embodiments, the user interface snapshot configuration message may include any information suitable for generating a snapshot of the identified user interface components at the server. Such information may include, but is not limited to: a user identifier, a user interface identifier, one or more user interface component identifiers, one or more database record identifiers, and/or one or more user interface snapshot configuration parameters.

FIG. 3illustrates an example of a server-side method300for user interface snapshot generation, performed in accordance with one or more embodiments. The method300may be performed at a server system. For example, the method300may be performed at one or more of the systems and devices shown inFIG. 4,FIG. 5, andFIG. 6. The method300may be performed in conjunction with one or more other methods described herein, such as the method200shown inFIG. 2and/or the method300shown inFIG. 3.

A request to provide a user interface to a client machine is received at302. According to various embodiments, the request may be received as part of the interaction of a user with data associated with an on-demand computing services environment. For instance, a user may access services via an on-demand computing services environment. Examples of such services may include a customer relations management system, a sales management system, a service management system, a customer marketing system, and/or other such information systems.

In some implementations, the request may be received as part of the interaction of a user with data stored in a remote database system. For instance, the remote database system may store information associated with a user's professional activities. The remote database system may store information such as user accounts, marketing operations, sales information, service information, and/or any other suitable data.

A user interface is transmitted to the client machine at304. In some implementations, the user interface may be transmitted to a web browser at the client machine via the internet. Alternatively, or additionally, the user interface may be transmitted to the client machine via a different mechanism, such as a native application installed on the client machine and capable of receiving information via the internet.

A user interface snapshot configuration message is received from the client machine at206. According to various embodiments, the user interface snapshot configuration message may be generated as described with respect to the method300shown inFIG. 2.

The identified user interface components are generated at310. In some implementations, generating the identified user interface components may involve any of a variety of operations included in the original transmission of the user interface to the client machine at the operation304. Such operations may include, but are not limited to: retrieving information from a database, dynamically creating a user interface based on user interface configuration information, and including the retrieved information in the generated user interface.

In some embodiments, generating the identified user interface components may involve one or more operations not performed when the user interface was originally transmitted to the client machine at304. For example, the components identified at308may be generated, while other components not identified at308need not necessarily be generated. As another example, the components identified at308may be rendered in a web browser interface at the server after they are generated. The web browser interface need not be presented on a display screen, but rather may be generated virtually.

In some embodiments, generating the identified user interface components may involve applying one or more configuration parameters, which may cause one or more user interface components to be presented in a fashion different than that initially displayed in the user interface on the display screen at the client device. For example, a set of user interface components originally presented in a line may be repositioned in a grid. As another example, a color scheme alteration may be applied to one or more user interface components. As yet another example, one or more portions of a user interface component may be resized. For instance, text that appears readable when presented in an original user interface may appear too small when presented in a snapshot at its original size. In such a situation, the text may be resized when generating the screenshot.

In particular embodiments, a server-side application tool may be used to generate a view of a user interface for the purpose of constructing a snapshot. For instance, a headless browser may be used. Examples of headless browsers include, but are not limited to: Firefox, Chrome, Phantom JS, HTMLUnit, TrifleJS, Splash, and SimpleBrowser. The headless browser may render the identified user interface components at the server and then store the rendered user interface components as a snapshot image.

A snapshot of the generated user interface components is generated at312. In some implementations, generating the snapshot may involve creating an image that combines the user interface components generated at310. The snapshot may be generated in accordance with one or more configuration parameters. For example, user interface components may be presented in a grid more suitable for presentation in a snapshot. As another example, the snapshot may be created at a designated resolution suitable for storage and/or transmission to a snapshot recipient.

In some embodiments, generating the snapshot may involve generating a live view of the selected webpage components. For instance, user interface components may be generated in an isolated manner, independent of the webpage in which they were presented. Such components may then be sent to another individual or may be stored in such a way that they may be independently presented by the server as user interfaces to the recipients of the snapshot.

The user interface snapshot is transmitted or stored at314. According to various embodiments, the user interface snapshot may be transmitted to one or more recipients. The user interface snapshot may be transmitted via any suitable message transmission medium. Such mediums may include, but are not limited to: a social networking messaging platform such as Salesforce Chatter, a messaging services such as short message service (SMS), WhatsApp, or Microsoft Skype, or email.

In particular embodiments, the snapshot or a thumbnail of the snapshot may be transmitted to the client machine. In this way, a user may receive verification that a snapshot was generated, and if desired may generate an additional snapshot.

In some implementations, the user interface snapshot may be stored in a database system. Alternately, or additionally, the user interface snapshot may be stored as a file in any network-accessible storage system.

FIG. 4shows a block diagram of an example of an environment410that includes an on-demand database service configured in accordance with some implementations. Environment410may include user systems412, network414, database system416, processor system417, application platform418, network interface420, tenant data storage422, tenant data423, system data storage424, system data425, program code426, process space428, User Interface (UI)430, Application Program Interface (API)432, PL/SOQL434, save routines436, application setup mechanism438, application servers450-1through450-N, system process space452, tenant process spaces454, tenant management process space460, tenant storage space462, user storage464, and application metadata466. Some of such devices may be implemented using hardware or a combination of hardware and software and may be implemented on the same physical device or on different devices. Thus, terms such as “data processing apparatus,” “machine,” “server” and “device” as used herein are not limited to a single hardware device, but rather include any hardware and software configured to provide the described functionality.

An on-demand database service, implemented using system416, may be managed by a database service provider. Some services may store information from one or more tenants into tables of a common database image to form a multi-tenant database system (MTS). As used herein, each MTS could include one or more logically and/or physically connected servers distributed locally or across one or more geographic locations. Databases described herein may be implemented as single databases, distributed databases, collections of distributed databases, or any other suitable database system. A database image may include one or more database objects. A relational database management system (RDBMS) or a similar system may execute storage and retrieval of information against these objects.

In some implementations, the application platform18may be a framework that allows the creation, management, and execution of applications in system416. Such applications may be developed by the database service provider or by users or third-party application developers accessing the service. Application platform418includes an application setup mechanism438that supports application developers' creation and management of applications, which may be saved as metadata into tenant data storage422by save routines436for execution by subscribers as one or more tenant process spaces454managed by tenant management process460for example. Invocations to such applications may be coded using PL/SOQL434that provides a programming language style interface extension to API432. A detailed description of some PL/SOQL language implementations is discussed in commonly assigned U.S. Pat. No. 7,730,478, titled METHOD AND SYSTEM FOR ALLOWING ACCESS TO DEVELOPED APPLICATIONS VIA A MULTI-TENANT ON-DEMAND DATABASE SERVICE, by Craig Weissman, issued on Jun. 1, 2010, and hereby incorporated by reference in its entirety and for all purposes. Invocations to applications may be detected by one or more system processes. Such system processes may manage retrieval of application metadata466for a subscriber making such an invocation. Such system processes may also manage execution of application metadata466as an application in a virtual machine.

In some implementations, each application server450may handle requests for any user associated with any organization. A load balancing function (e.g., an F5 Big-IP load balancer) may distribute requests to the application servers450based on an algorithm such as least-connections, round robin, observed response time, etc. Each application server450may be configured to communicate with tenant data storage422and the tenant data423therein, and system data storage424and the system data425therein to serve requests of user systems412. The tenant data423may be divided into individual tenant storage spaces462, which can be either a physical arrangement and/or a logical arrangement of data. Within each tenant storage space462, user storage464and application metadata466may be similarly allocated for each user. For example, a copy of a user's most recently used (MRU) items might be stored to user storage464. Similarly, a copy of MRU items for an entire tenant organization may be stored to tenant storage space462. A UI430provides a user interface and an API432provides an application programming interface to system416resident processes to users and/or developers at user systems412.

System416may implement a web-based message transmission and configuration system. For example, in some implementations, system416may include application servers configured to implement and execute interspersed message batching software applications. The application servers may be configured to provide related data, code, forms, web pages and other information to and from user systems412. Additionally, the application servers may be configured to store information to, and retrieve information from a database system. Such information may include related data, objects, and/or Webpage content. With a multi-tenant system, data for multiple tenants may be stored in the same physical database object in tenant data storage422, however, tenant data may be arranged in the storage medium(s) of tenant data storage422so that data of one tenant is kept logically separate from that of other tenants. In such a scheme, one tenant may not access another tenant's data, unless such data is expressly shared.

Several elements in the system shown inFIG. 4include conventional, well-known elements that are explained only briefly here. For example, user system412may include processor system412A, memory system412B, input system412C, and output system412D. A user system412may be implemented as any computing device(s) or other data processing apparatus such as a mobile phone, laptop computer, tablet, desktop computer, or network of computing devices. User system12may run an internet browser allowing a user (e.g., a subscriber of an MTS) of user system412to access, process and view information, pages and applications available from system416over network414. Network414may be any network or combination of networks of devices that communicate with one another, such as any one or any combination of a LAN (local area network), WAN (wide area network), wireless network, or other appropriate configuration.

The users of user systems412may differ in their respective capacities, and the capacity of a particular user system412to access information may be determined at least in part by “permissions” of the particular user system412. As discussed herein, permissions generally govern access to computing resources such as data objects, components, and other entities of a computing system, such as an interspersed message batching system, a social networking system, and/or a CRM database system. “Permission sets” generally refer to groups of permissions that may be assigned to users of such a computing environment. For instance, the assignments of users and permission sets may be stored in one or more databases of System416. Thus, users may receive permission to access certain resources. A permission server in an on-demand database service environment can store criteria data regarding the types of users and permission sets to assign to each other. For example, a computing device can provide to the server data indicating an attribute of a user (e.g., geographic location, industry, role, level of experience, etc.) and particular permissions to be assigned to the users fitting the attributes. Permission sets meeting the criteria may be selected and assigned to the users. Moreover, permissions may appear in multiple permission sets. In this way, the users can gain access to the components of a system.

In some an on-demand database service environments, an Application Programming Interface (API) may be configured to expose a collection of permissions and their assignments to users through appropriate network-based services and architectures, for instance, using Simple Object Access Protocol (SOAP) Web Service and Representational State Transfer (REST) APIs.

In some implementations, a permission set may be presented to an administrator as a container of permissions. However, each permission in such a permission set may reside in a separate API object exposed in a shared API that has a child-parent relationship with the same permission set object. This allows a given permission set to scale to millions of permissions for a user while allowing a developer to take advantage of joins across the API objects to query, insert, update, and delete any permission across the millions of possible choices. This makes the API highly scalable, reliable, and efficient for developers to use.

In some implementations, a permission set API constructed using the techniques disclosed herein can provide scalable, reliable, and efficient mechanisms for a developer to create tools that manage a user's permissions across various sets of access controls and across types of users. Administrators who use this tooling can effectively reduce their time managing a user's rights, integrate with external systems, and report on rights for auditing and troubleshooting purposes. By way of example, different users may have different capabilities with regard to accessing and modifying application and database information, depending on a user's security or permission level, also called authorization. In systems with a hierarchical role model, users at one permission level may have access to applications, data, and database information accessible by a lower permission level user, but may not have access to certain applications, database information, and data accessible by a user at a higher permission level.

As discussed above, system416may provide on-demand database service to user systems412using an MTS arrangement. By way of example, one tenant organization may be a company that employs a sales force where each salesperson uses system416to manage their sales process. Thus, a user in such an organization may maintain contact data, leads data, customer follow-up data, performance data, goals and progress data, etc., all applicable to that user's personal sales process (e.g., in tenant data storage422). In this arrangement, a user may manage his or her sales efforts and cycles from a variety of devices, since relevant data and applications to interact with (e.g., access, view, modify, report, transmit, calculate, etc.) such data may be maintained and accessed by any user system412having network access.

When implemented in an MTS arrangement, system416may separate and share data between users and at the organization-level in a variety of manners. For example, for certain types of data each user's data might be separate from other users' data regardless of the organization employing such users. Other data may be organization-wide data, which is shared or accessible by several users or potentially all users form a given tenant organization. Thus, some data structures managed by system416may be allocated at the tenant level while other data structures might be managed at the user level. Because an MTS might support multiple tenants including possible competitors, the MTS may have security protocols that keep data, applications, and application use separate. In addition to user-specific data and tenant-specific data, system416may also maintain system-level data usable by multiple tenants or other data. Such system-level data may include industry reports, news, postings, and the like that are sharable between tenant organizations.

In some implementations, user systems412may be client systems communicating with application servers450to request and update system-level and tenant-level data from system416. By way of example, user systems412may send one or more queries requesting data of a database maintained in tenant data storage422and/or system data storage424. An application server450of system416may automatically generate one or more SQL statements (e.g., one or more SQL queries) that are designed to access the requested data. System data storage424may generate query plans to access the requested data from the database.

FIG. 5Ashows a system diagram of an example of architectural components of an on-demand database service environment500, configured in accordance with some implementations. A client machine located in the cloud504may communicate with the on-demand database service environment via one or more edge routers508and512. A client machine may include any of the examples of user systems412described above. The edge routers508and512may communicate with one or more core switches520and524via firewall516. The core switches may communicate with a load balancer528, which may distribute server load over different pods, such as the pods540and544by communication via pod switches532and536. The pods540and544, which may each include one or more servers and/or other computing resources, may perform data processing and other operations used to provide on-demand services. Components of the environment may communicate with a database storage556via a database firewall548and a database switch552.

Accessing an on-demand database service environment may involve communications transmitted among a variety of different components. The environment500is a simplified representation of an actual on-demand database service environment. For example, some implementations of an on-demand database service environment may include anywhere from one to many devices of each type. Additionally, an on-demand database service environment need not include each device shown, or may include additional devices not shown, inFIGS. 5A and 5B.

The cloud504refers to any suitable data network or combination of data networks, which may include the Internet. Client machines located in the cloud504may communicate with the on-demand database service environment500to access services provided by the on-demand database service environment500. By way of example, client machines may access the on-demand database service environment500to retrieve, store, edit, and/or process interspersed message batching information.

In some implementations, the edge routers508and512route packets between the cloud504and other components of the on-demand database service environment500. The edge routers508and512may employ the Border Gateway Protocol (BGP). The edge routers508and512may maintain a table of IP networks or ‘prefixes’, which designate network reachability among autonomous systems on the internet.

In one or more implementations, the firewall516may protect the inner components of the environment500from internet traffic. The firewall516may block, permit, or deny access to the inner components of the on-demand database service environment500based upon a set of rules and/or other criteria. The firewall516may act as one or more of a packet filter, an application gateway, a stateful filter, a proxy server, or any other type of firewall.

In some implementations, the core switches520and524may be high-capacity switches that transfer packets within the environment500. The core switches520and524may be configured as network bridges that quickly route data between different components within the on-demand database service environment. The use of two or more core switches520and524may provide redundancy and/or reduced latency.

In some implementations, communication between the pods540and544may be conducted via the pod switches532and536. The pod switches532and536may facilitate communication between the pods540and544and client machines, for example via core switches520and524. Also or alternatively, the pod switches532and536may facilitate communication between the pods540and544and the database storage556. The load balancer528may distribute workload between the pods, which may assist in improving the use of resources, increasing throughput, reducing response times, and/or reducing overhead. The load balancer528may include multilayer switches to analyze and forward traffic.

In some implementations, access to the database storage556may be guarded by a database firewall548, which may act as a computer application firewall operating at the database application layer of a protocol stack. The database firewall548may protect the database storage556from application attacks such as structure query language (SQL) injection, database rootkits, and unauthorized information disclosure. The database firewall548may include a host using one or more forms of reverse proxy services to proxy traffic before passing it to a gateway router and/or may inspect the contents of database traffic and block certain content or database requests. The database firewall548may work on the SQL application level atop the TCP/IP stack, managing applications' connection to the database or SQL management interfaces as well as intercepting and enforcing packets traveling to or from a database network or application interface.

In some implementations, the database storage556may be an on-demand database system shared by many different organizations. The on-demand database service may employ a single-tenant approach, a multi-tenant approach, a virtualized approach, or any other type of database approach. Communication with the database storage556may be conducted via the database switch552. The database storage556may include various software components for handling database queries. Accordingly, the database switch552may direct database queries transmitted by other components of the environment (e.g., the pods540and544) to the correct components within the database storage556.

FIG. 5Bshows a system diagram further illustrating an example of architectural components of an on-demand database service environment, in accordance with some implementations. The pod544may be used to render services to user(s) of the on-demand database service environment500. The pod544may include one or more content batch servers564, content search servers568, query servers582, file servers586, access control system (ACS) servers580, batch servers584, and app servers588. Also, the pod544may include database instances590, quick file systems (QFS)592, and indexers594. Some or all communication between the servers in the pod544may be transmitted via the switch536.

In some implementations, the app servers588may include a framework dedicated to the execution of procedures (e.g., programs, routines, scripts) for supporting the construction of applications provided by the on-demand database service environment500via the pod544. One or more instances of the app server588may be configured to execute all or a portion of the operations of the services described herein.

In some implementations, as discussed above, the pod544may include one or more database instances590. A database instance590may be configured as an MTS in which different organizations share access to the same database, using the techniques described above. Database information may be transmitted to the indexer594, which may provide an index of information available in the database590to file servers586. The QFS592or other suitable filesystem may serve as a rapid-access file system for storing and accessing information available within the pod544. The QFS592may support volume management capabilities, allowing many disks to be grouped together into a file system. The QFS592may communicate with the database instances590, content search servers568and/or indexers594to identify, retrieve, move, and/or update data stored in the network file systems (NFS)596and/or other storage systems.

In some implementations, one or more query servers582may communicate with the NFS596to retrieve and/or update information stored outside of the pod544. The NFS596may allow servers located in the pod544to access information over a network in a manner similar to how local storage is accessed. Queries from the query servers522may be transmitted to the NFS596via the load balancer528, which may distribute resource requests over various resources available in the on-demand database service environment500. The NFS596may also communicate with the QFS592to update the information stored on the NFS596and/or to provide information to the QFS592for use by servers located within the pod544.

In some implementations, the content batch servers564may handle requests internal to the pod544. These requests may be long-running and/or not tied to a particular customer, such as requests related to log mining, cleanup work, and maintenance tasks. The content search servers568may provide query and indexer functions such as functions allowing users to search through content stored in the on-demand database service environment500. The file servers586may manage requests for information stored in the file storage598, which may store information such as documents, images, basic large objects (BLOBs), etc. The query servers582may be used to retrieve information from one or more file systems. For example, the query system582may receive requests for information from the app servers588and then transmit information queries to the NFS596located outside the pod544. The ACS servers580may control access to data, hardware resources, or software resources called upon to render services provided by the pod544. The batch servers584may process batch jobs, which are used to run tasks at specified times. Thus, the batch servers584may transmit instructions to other servers, such as the app servers588, to trigger the batch jobs.

While some of the disclosed implementations may be described with reference to a system having an application server providing a front end for an on-demand database service capable of supporting multiple tenants, the disclosed implementations are not limited to multi-tenant databases nor deployment on application servers. Some implementations may be practiced using various database architectures such as ORACLE®, DB2® by IBM and the like without departing from the scope of present disclosure.

FIG. 6illustrates one example of a computing device. According to various embodiments, a system600suitable for implementing embodiments described herein includes a processor601, a memory module603, a storage device605, an interface611, and a bus615(e.g., a PCI bus or other interconnection fabric.) System600may operate as variety of devices such as an application server, a database server, or any other device or service described herein. Although a particular configuration is described, a variety of alternative configurations are possible. The processor601may perform operations such as those described herein. Instructions for performing such operations may be embodied in the memory603, on one or more non-transitory computer readable media, or on some other storage device. Various specially configured devices can also be used in place of or in addition to the processor601. The interface611may be configured to send and receive data packets over a network. Examples of supported interfaces include, but are not limited to: Ethernet, fast Ethernet, Gigabit Ethernet, frame relay, cable, digital subscriber line (DSL), token ring, Asynchronous Transfer Mode (ATM), High-Speed Serial Interface (HSSI), and Fiber Distributed Data Interface (FDDI). These interfaces may include ports appropriate for communication with the appropriate media. They may also include an independent processor and/or volatile RAM. A computer system or computing device may include or communicate with a monitor, printer, or other suitable display for providing any of the results mentioned herein to a user.

Any of the disclosed implementations may be embodied in various types of hardware, software, firmware, computer readable media, and combinations thereof. For example, some techniques disclosed herein may be implemented, at least in part, by computer-readable media that include program instructions, state information, etc., for configuring a computing system to perform various services and operations described herein. Examples of program instructions include both machine code, such as produced by a compiler, and higher-level code that may be executed via an interpreter. Instructions may be embodied in any suitable language such as, for example, Apex, Java, Python, C++, C, HTML, any other markup language, JavaScript, ActiveX, VBScript, or Perl. Examples of computer-readable media include, but are not limited to: magnetic media such as hard disks and magnetic tape; optical media such as flash memory, compact disk (CD) or digital versatile disk (DVD); magneto-optical media; and other hardware devices such as read-only memory (“ROM”) devices and random-access memory (“RAM”) devices. A computer-readable medium may be any combination of such storage devices.

In the foregoing specification, various techniques and mechanisms may have been described in singular form for clarity. However, it should be noted that some embodiments include multiple iterations of a technique or multiple instantiations of a mechanism unless otherwise noted. For example, a system uses a processor in a variety of contexts but can use multiple processors while remaining within the scope of the present disclosure unless otherwise noted. Similarly, various techniques and mechanisms may have been described as including a connection between two entities. However, a connection does not necessarily mean a direct, unimpeded connection, as a variety of other entities (e.g., bridges, controllers, gateways, etc.) may reside between the two entities.

In the foregoing specification, reference was made in detail to specific embodiments including one or more of the best modes contemplated by the inventors. While various implementations have been described herein, it should be understood that they have been presented by way of example only, and not limitation. For example, some techniques and mechanisms are described herein in the context of on-demand computing environments that include MTSs. However, the techniques of disclosed herein apply to a wide variety of computing environments. Particular embodiments may be implemented without some or all of the specific details described herein. In other instances, well known process operations have not been described in detail in order to avoid unnecessarily obscuring the disclosed techniques. Accordingly, the breadth and scope of the present application should not be limited by any of the implementations described herein, but should be defined only in accordance with the claims and their equivalents.