# Patent

## Title
Web-based debugging of database sessions

## Abstract

A system includes reception, from a first user, of a first web-protocol request to establish a first database server session, establishment of the first database server session in response to the first request, reception, from a second user, of a second web-protocol request to establish a second database server session and to communicate with the second database server session via a non-transient connection, establishment of the second database server session in response to the second request, reception, from the second user, of a third web-protocol request to attach the second database server session to the first database server session, attachment of the second database server session to the first database server session, and transmission of debugging information of the first database server session to the second user via the non-transient connection.

## Background
CROSS REFERENCE TO RELATED APPLICATIONS
This application claims benefit to and priority of U.S. Patent Application Ser. No. 61/908,710, filed Nov. 25, 2013, the contents of which are hereby incorporated by reference in their entirety for all purposes.


BACKGROUND
According to conventional database architectures, a client application interacts with a database application executing on a database application server. In response to requests received from the client application, the database application acquires stored data from an underlying database system, performs any necessary processing, and provides the data to the client application. Some architectures support Web-based communication (e.g., HyperText Transfer Protocol (HTTP)) between the client application and the database application.
Development of a database application typically requires some degree of debugging activity. In the case of a database application designed for a Web-based architecture, it may be desirable to provide Web-based debugging of the database application in the context of a Web-initiated database session.



BRIEF DESCRIPTION OF THE DRAWINGS
FIG. 1 is a block diagram of a system according to some embodiments.
FIGS. 2A and 2B comprise a flow diagram of a process according to some embodiments.
FIG. 3 is an outward view of a user interface according to some embodiments.
FIG. 4 is a sequence diagram according to some embodiments.
FIG. 5 is an outward view of a user interface according to some embodiments.
FIG. 6 illustrates a portion of a database table according to some embodiments.
FIG. 7 is a detailed block diagram of an application server according to some embodiments
FIG. 8 is a detailed block diagram of an application server according to some embodiments.
FIG. 9 is a block diagram of an apparatus according to some embodiments.



DETAILED DESCRIPTION
The following description is provided to enable any person in the art to make and use the described embodiments and sets forth the best mode contemplated for carrying out some embodiments. Various modifications, however, will remain readily apparent to those in the art.
Some embodiments provide Web-based debugging of database server sessions. More particularly, some embodiments may provide debugging, using a Web client, of database server-side application program code (e.g., JavaScript code) in the context of an existing database server session.
FIG. 1 is a block diagram of system 100 according to some embodiments. System 100 includes database system 110, clients 120, and application server 130. Generally, application server 130 receives queries from clients 120 and provides results to clients 120 based on data of database system 110. Database system 110 and application server 130 may support multi-tenancy to separately support multiple unrelated clients by providing multiple logical database systems which are programmatically isolated from one another.
Database system 110 may implement an “in-memory” database, in which a full database stored in volatile (e.g., non-disk-based) memory (e.g., Random Access Memory). The full database may be persisted in and/or backed up to fixed disks (not shown). Embodiments are not limited to an in-memory implementation. For example, the full database may be stored in one or more fixed disks (e.g., persistent memory for storing their respective portions of the full database) and accessed during operation when needed.
Database system 110 may comprise any query-responsive data source or sources that are or become known, including but not limited to a structured-query language (SQL) relational database management system. Database system 110 may comprise a relational database, a multi-dimensional database, an eXtendable Markup Language (XML) document, or any other data storage system storing structured and/or unstructured data. Database system 110 may be distributed among several relational databases, dimensional databases, and/or other data sources. Embodiments are not limited to any number or types of data sources.
In some embodiments, data of database system 110 may comprise one or more of conventional tabular data, row-based data, column-based data, and object-based data. Moreover, the data of database system 110 may be indexed and/or selectively replicated in an index to allow fast searching and retrieval thereof.
Application server 130 generally provides data of database system 110 to reporting/analysis clients, such as clients 120, in response to queries received therefrom. In some embodiments, application server 130 receives an instruction from a client 120 to analyze a set of values, such as the values stored in a column of a database table. Application server 130 generates a statement execution plan based on the instruction and the plan is forwarded to database system 110, which executes the plan and returns a dataset based on the plan. Application server 130 then returns the dataset to the client 120. Embodiments are not limited thereto.
Application server 130 includes HTTP interface 132 and WebSocket interface 134, through which clients 120 communicate with applications 136 executing on application server 130. HTTP interface 132 supports a transient request/response protocol over Transmission Control Protocol (TCP) as described above, while WebSocket interface 134 supports non-transient full-duplex communications between application server 130 and those clients 120 which also implement the WebSocket protocol over a single TCP connection.
Application server 130 may be separated from or closely integrated with database system 110. A closely-integrated application server 130 may enable execution of server applications completely on the database platform, without the need for an additional application server.
Each of clients 120 may comprise one or more devices executing program code of a software application for presenting user interfaces to allow interaction with application server 130. The user interfaces may comprise user interfaces suited for reporting, data analysis, and/or any other functions based on the data of database system 110. The user interfaces may also or alternatively comprise interfaces for administration of application server 130, database system 110 and/or applications 136 of application server 130. For example, one of client 120 may present a user interface using which an administrator may attach to an existing server session and debug program code of one of applications 136.
Presentation of a user interface may comprise any degree or type of rendering, depending on the type of user interface code generated by application server 130. For example, a client 120 may execute a Web Browser to request and receive a Web page (e.g., in HTML format) from application server 130 via HTTP, HTTPS, and/or WebSocket, and may render and present the Web page according to known protocols. One or more of clients 120 may also or alternatively present user interfaces by executing a standalone executable file (e.g., an .exe file) or code (e.g., a JAVA applet) within a virtual machine.
FIGS. 2A and 2B comprise a flow diagram of process 200 according to some embodiments. In some embodiments, various hardware elements of application server 130 (e.g., one or more processors) execute program code to perform process 200. Process 200 and all other processes mentioned herein may be embodied in processor-executable program code read from one or more of non-transitory computer-readable media, such as a floppy disk, a disk-based or solid-state hard drive, CD-ROM, a DVD-ROM, a Flash drive, and a magnetic tape, and then stored in a compressed, uncompiled and/or encrypted format. In some embodiments, hard-wired circuitry may be used in place of, or in combination with, program code for implementation of processes according to some embodiments. Embodiments are therefore not limited to any specific combination of hardware and software.
Initially, a breakpoint is defined in server-side application program code at S205. The program code may conform to C++, COBOL, Visual Basic, JavaScript, or another programming language that is or becomes known. A breakpoint is a point in program code at which execution of the program code stops. A breakpoint is useful in debugging because, after execution is stopped at the breakpoint, a debugger may inspect values of variables and application states as they existed at the stoppage point.
FIG. 3 is an outward view of an interface for defining a breakpoint according to some embodiments. Programming environment 300 may comprise an interface provided by a programming application, toolkit or the like executing on a computing system. Window 310 displays server-side application program code 315. As shown, a developer has operated an input device of the computing system to define breakpoints 320 and 330 within program code 315.
In the case of multiple breakpoints such as breakpoints 320 and 330, execution of the application stops when breakpoint 320 is reached. A debugger performs any desired debugging activity and then issues a command to resume execution of the application. Execution resumes and then stops again when breakpoint 330 is reached. Embodiments of S205 are not limited to the interface of FIG. 3 or to the description thereof.
After definition of the breakpoint, the server-side application program code may be compiled and stored as one of applications 136. The stored application 136 is made available for execution by application server 130 via registration and/or other procedures which are known in the art.
Next, at S210, a Web-based request to establish a first database server session is received from a first user. S210 may comprise receiving an HTTP request from an HTTP client at HTTP interface 132. FIG. 4 is a sequence diagram illustrating execution of process 200 according to some embodiments. As shown, client 120′ transmits a request to application server 130 at S210.
The first database server session is established with the first user at S215. FIG. 4 illustrates establishment of Session1 at application server 130. In accordance with the Web-based request received at S210, FIG. 4 also illustrates transmission of a corresponding response from application server 130 to client 120′.
A Web-based request is received from a second user at S220. The request is a request to establish a second database server session and to communicate via a non-transient connection. According to some embodiments, a WebSocket client application of client 120′′ transmits the request, which is received at S220 by WebSocket interface 134 of application server 130. In response, the second database server session is established at S225. The second database server session is identified as Session2 in FIG. 4.
The WebSocket request causes application server 130 to establish and maintain a non-transitory, full-duplex connection with client 120′′. Embodiments are not limited to the WebSocket protocol for communication via a Web-based, non-transitory connection.
Next, at S230, a request is received from the second user, via the non-transient connection, to attach the second database server session (e.g., Session2) to the first database server session (e.g., Session1). According to some embodiments, it is then determined at S235 whether the second user is authorized to attach to the first session.
Any authorization/security mechanism(s) may be utilized at S235. According to some embodiments, authorization may be granted by a user and/or administrator prior to process 200. FIG. 5 is an outward view of interface 500 for providing authorization according to some embodiments. Interface 500 allows a first user to specify a Username of a second user who is authorized to debug one or more sessions of the first user, an expiration date/time associated with the authorization, and an optional token. If a token is not specified, the authorization applies to all sessions of the first user. If a token is specified, the authorization applies only to sessions flagged with the token. In this regard, the token may be received from the first user as an internet cookie along with the request of S210, which results in association of the token with first database server session.
The user selects Grant icon 510 to instantiate the authorization. According to some embodiments, instantiation of an authorization includes storing data associated with the authorization as a metadata object within a metadata repository of application server 130. FIG. 6 depicts an example of a repository table according to some embodiments. Debug authorization table 600 specifies, for each authorization stored therein, a Grantor, a Grantee, a Start time, an End time, and an optional Token.
Accordingly, in some embodiments, S235 includes attempting to locate a record of table 600 which includes the first user as Grantor and the second user as Grantee, and for which the current time falls between the specified Start time and End time. If such a record is found, it is determined whether the record also specifies a token. If the record does not specify a token, the determination at S235 is affirmative. If the record specifies a token, the determination at S235 turns on whether the specified token was received from client 120′ with the request of S210.
Regardless of the authorization/security mechanism(s) employed at S235, an error is returned to the second user at S240 if it is determined that the second user is not authorized to attach to the first session. If it is determined that the second user is authorized to attach to the first session, the second database server session is attached to the first database server session at S245.
Once the sessions are attached, the second database server session inherits all relevant states of the first database server session.
Next, as illustrated in FIG. 4, a second request is received from the first user (e.g., client 120′) at S250. The second request causes execution of the server-side application program code mentioned above with respect to S205. According to some embodiments, the server-side application 136 may have already been executing in server 130 prior to S250, but the request received at S250 prompts execution of the server-side application program code which includes the breakpoint defined at S205.
Accordingly, the server-side application program code executes at S255 until it is determined that the breakpoint has been reached. Once this determination is made, execution of the program code halts at S260. Next, at S265, debugging information of the first database server session is transmitted to the second user via the non-transient connection, as illustrated in FIG. 4. The debugging information may include information specifying a state of the application executing in the first database server session, memory values, or any other information which may be helpful in debugging the application.
Some embodiments provide a mechanism for inactive testing of design-time artifacts. Conventionally, database design time artifacts may require an explicit activation step and can therefore only be tested after they have been activated. For example, a server-side script needs to be precompiled before it can be used at runtime.
Some embodiments allow a request to be flagged to access inactive, private artifacts instead of the active, public artifacts at runtime (inactive request). For all artifacts that are currently edited by the current user and are affected by the inactive request an inactive, private runtime representation is created (inactive state). The execution of such an inactive request operates on the inactive state of the user.
Therefore, according to some embodiments, developers can test design time artifacts independent of each other, and it is not necessary to make changes publicly visible in order to test them.
According to some embodiments, the communication between debugging client 102′′ and application server 130 at S265 uses a JavaScript Object Notation (JSON)-based protocol and a non-transient socket-like connection. For example, client 120′′ may connect to a debugging tool executing on application server 130 using the open-source Crossfire code and WebSocket, and the debugging tool may transmit debugging information to client 120′′ via this connection at S265. According to some embodiments, multiple debugging sessions may be attached to a single database server session. “Simultaneously” in this context indicates that two or more debugging sessions are attached to a first database server session for at least one common period of time.
FIG. 7 illustrates database platform 710 integrating web-based application server 720 and index server 730 according to some embodiments. Application server 720 may enable execution of server applications completely on database platform 710, without the need for an additional application server. In this regard, database platform 710 may comprise an implementation of application server 130 and database system 110 of FIG. 1.
Clients 740 send their requests to database platform 710 via HTTP, which may include requests for WebSocket connections. Clients 740 may be Web browsers, mobile applications, or other applications that consume resources and services provided by server applications. According to some embodiments, the presentation logic is run on clients 740.
Server 720 runs services that accept the HTTP requests and maps them to database queries and stored procedure calls. Data-intensive logic may be executed in index server 730 (using SQL, SQLScript, views, L procedures, C++, etc.).
In this regard, web application server 720 can be viewed as an index server with server layer 725 on top. However, according to some embodiments, no application data is stored in Web application server 720 itself. If server layer 725 needs to access tables or views or needs to call a stored procedure, it uses the illustrated internal SQL API to open a local database connection and then sends an SQL statement to the SQL processor in the web application server 720. The statement is processed by the SQL processor or by the calculation engine of web application server 710.
The SQL processor and the calculation engine delegate the execution to the index server 730 which manages the required data. This delegation may be similar to the mechanism used in a distributed database system including multiple index servers. In contrast, however, web application server 720 delegates the execution of database operations because it does not store application tables. Integration of server 720 into database platform 710 may lead to simplified administration and a better development experience.
FIG. 8 is a detailed block diagram of Web application server 810 according to some embodiments. Server 810 may comprise an implementation of application server 130 of FIG. 1, while index server 830 may comprise an implementation of database system 110.
Incoming requests from clients 820 are received by the request handler. The request handler first determines the server-side application to which the requested resource belongs by invoking the application registry, which maintains a list of all active applications. The application registry initially reads this information from runtime storage tables located in the master index server and caches the information in its application index. After the application is determined, optional Uniform Resource Locator (URL) rewriting rules are applied. URL rewriting rules can be defined for each application to map between external URLs and corresponding internal technical URLs.
The request handler then invokes the session manager. The session manager either relates the request to an existing session or starts a new session. The session manager is responsible for session authentication. A developer may specify, on the package level, whether authentication is required for accessing the resources. Server 810 may support several authentication mechanisms, including but not limited to SAML, SAP assertion ticket, SAP logon ticket, Kerberos, X.509 certificates, and user and password using HTTP basic authentication or form-based logon.
According to some embodiments, the session manager executes S235 and S245 of process 200. In particular, the session manager determines whether the second user is authorized to attach to the first session based on authorization information such as that described with respect to FIGS. 5 and 6. The session manager also links the first and second database server sessions if the authorization is successful.
After successful authentication, the request handler forwards the request to the responsible resource handler of server 810. FIG. 8 illustrates several different resource handlers for different types of resources.
The static content handler is called for content such as Hypertext Markup Language (HTML) files, client side scripts, or images. The static content handler retrieves the resources from the runtime storage.
The OData handler is invoked if the requested resource belongs to an OData service. If the client requests the service definition, the OData handler returns a document including the metadata about the service. This document is generated during the activation of the service descriptor which was written by the developer. If the client requests actual data, the OData handler constructs the required database statements and invokes them using the internal SQL API. The OData handler transforms the query results into the format requested by the client, which can be either Atom (content type “atom+XML”) or JSON. As explained above, developers can specify application specific code to be called for validating or executing OData write requests. In this case the OData handler calls the specified code, which may be SQLScript procedures or JavaScript functions.
The JavaScript handler is invoked if the requested resource is a server-side JavaScript application such as those described herein. Embodiments may support server-side applications written in other programming languages. The JavaScript handler reads the runtime object with the JavaScript byte code from the runtime storage tables, and invokes the JavaScript runtime for executing it. The JavaScript runtime also contains an implementation of JavaScript APIs. If such an API is called, the JavaScript runtime invokes the responsible component, such as the session manager, the outbound HTTP client, the trace writer, or the internal SQL API.
The outbound HTTP client is used to send HTTP/S requests to an external server. The connection details of the remote server need to be specified in advance by creating an HTTP destination configuration. The internal SQL API invokes an SQL execution chain. The SQL executor and the calculation engine in server 810 delegate the actual data operations to the index server where the data resides.
The C++ handler is responsible for resources and services exposed by system applications that are written in C++. These system applications have the same lifecycle as the database platform and are part of the database build. One example is a Direct Extractor Connection (DXC) that allows DataSource extractor-based data replication between clients and the database platform via HTTP. DataSource extractors in the client are redirected to send extracted data to the database platform system via HTTP. The data is received by the DXC system application in the XS server, which stores it in the database.
FIG. 9 is a block diagram of apparatus 900 according to some embodiments. Apparatus 900 may comprise a general-purpose computing apparatus and may execute program code to perform any of the functions described herein. Apparatus 900 may comprise an implementation of application server 130 and database system 110 of FIG. 1 in some embodiments. Apparatus 900 may include other unshown elements according to some embodiments.
Apparatus 900 includes processor 910 operatively coupled to communication device 920, data storage device 930, one or more input devices 940, one or more output devices 950 and memory 960. Communication device 920 may facilitate communication with external devices, such as a reporting client, or a data storage device. Input device(s) 940 may comprise, for example, a keyboard, a keypad, a mouse or other pointing device, a microphone, knob or a switch, an infra-red (IR) port, a docking station, and/or a touch screen. Input device(s) 940 may be used, for example, to enter information into apparatus 900. Output device(s) 950 may comprise, for example, a display (e.g., a display screen) a speaker, and/or a printer.
Data storage device 930 may comprise any appropriate persistent storage device, including combinations of magnetic storage devices (e.g., magnetic tape, hard disk drives and flash memory), optical storage devices, Read Only Memory (ROM) devices, etc., while memory 960 may comprise Random Access Memory (RAM).
Application server 932 may comprise program code executed by processor 910 to cause apparatus 900 to perform any one or more of the processes described herein. Embodiments are not limited to execution of these processes by a single apparatus. Database 934 may include database data as described above. As also described above, database data (either cached or a full database) may be stored in volatile memory such as memory 960. Data storage device 930 may also store data and other program code for providing additional functionality and/or which are necessary for operation of apparatus 900, such as device drivers, operating system files, etc.
The foregoing diagrams represent logical architectures for describing processes according to some embodiments, and actual implementations may include more or different components arranged in other manners. Other topologies may be used in conjunction with other embodiments. Moreover, each component or device described herein may be implemented by any number of devices in communication via any number of other public and/or private networks. Two or more of such computing devices may be located remote from one another and may communicate with one another via any known manner of network(s) and/or a dedicated connection. Each component or device may comprise any number of hardware and/or software elements suitable to provide the functions described herein as well as any other functions. For example, any computing device used in an implementation of a system according to some embodiments may include a processor to execute program code such that the computing device operates as described herein.
All systems and processes discussed herein may be embodied in program code stored on one or more non-transitory computer-readable media. Such media may include, for example, a floppy disk, a CD-ROM, a DVD-ROM, a Flash drive, magnetic tape, and solid state Random Access Memory (RAM) or Read Only Memory (ROM) storage units. Embodiments are therefore not limited to any specific combination of hardware and software.
Embodiments described herein are solely for the purpose of illustration. Those in the art will recognize other embodiments may be practiced with modifications and alterations to that described above.

## Claims

1. A system comprising:
a memory storing processor-executable process steps; and
a processor to execute the processor-executable process steps to cause the system to:
receive, from a first user, a first web-protocol request to establish a first database server session;
establish the first database server session in response to the first request;
receive, from a second user, a second web-protocol request to establish a second database server session and to communicate with the second database server session via a non-transient connection;
establish the second database server session in response to the second request;
receive a user interface from a client of one of the first database server session and the second database server session;
attach the user interface to one of the first database server session and the second database server session;
the user interface including program code configured to debug an application;
receive, from the second user, a third web-protocol request to attach the second database server session to the first database server session;
attach the second database server session to the first database server session;
receive a token from one of the first user and the second user, the token specifying that another of the first user and the second user is authorized to debug one or more of the server sessions;
receive from one of the first user and the second user a first request to access inactive private artifacts to test design time artifacts respectively associated with one of the first database server session and the second database server session;
determine with the token if the first request is from an authorized user; and
if the first request is from an authorized user, then:
activate the private artifacts in response to the received first request;
create a private runtime representation of the activated private artifacts; and
transmit debugging information of the debugged server session via the non-transient connection to the other of the first user and the second user that did not provide the first request.

2. A system according to claim 1, wherein the processor is further to execute the processor-executable process steps to cause the system to:
execute server-side application program code in the first database server session;
prior to transmission of the debugging information, determine that execution has reached a breakpoint in the server-side application program code;
in response to the determination that execution has reached the breakpoint, and prior to transmission of the debugging information, halt execution of the server-side application program code.

3. A system according to claim 1, wherein the first request conforms to HyperText Transfer Protocol protocol, and
wherein the second request and the third request conform to Web Socket protocol.

4. A system according to claim 1, wherein the processor is further to execute the processor-executable process steps to cause the system to:
receive, from a third user, a fourth web-protocol request to establish a third database server session and to communicate with the third database server session via a second non-transient connection;
establish the third database server session in response to the fourth request;
receive, from the third user, a fifth web-protocol request to attach the third database server session to the first database server session;
attach the third database server session to the first database server session; and
transmit second debugging information of the first database server session to the third user via the second non-transient connection.

5. A system according to claim 4, wherein the processor is further to execute the processor-executable process steps to cause the system to:
execute server-side application program code in the first database server session;
prior to transmission of the debugging information, determine that execution has reached a breakpoint in the server-side application program code;
in response to the determination that execution has reached the breakpoint, and prior to transmission of the debugging information and the second debugging information, halt execution of the server-side application program code.

6. A system according to claim 4, wherein the processor is further to execute the processor-executable process steps to cause the system to:
in response to the third request, determine whether the second user is authorized to debug the first database server session, and
in response to the fifth request, determine whether the third user is authorized to debug the first database server session.

7. A system according to claim 1, wherein the processor is further to execute the processor-executable process steps to cause the system to:
in response to the third request, determine whether the second user is authorized to debug the first database server session.

8. A computer-implemented method comprising:
receiving, from a first user, a first web-protocol request to establish a first database server session;
establishing the first database server session in response to the first request;
receiving a user interface from a client of one of the first database server session and the second database server session;
attaching the user interface to one of the first database server session and the second database server session;
the user interface including program code configured to debug an application;
receiving, from a second user, a second web-protocol request to establish a second database server session and to communicate with the second database server session via a non-transient connection;
establishing the second database server session in response to the second request;
receiving, from the second user, a third web-protocol request to attach the second database server session to the first database server session;
in response to the third request, determining whether the second user is authorized to debug the first database server session based on stored authorization information;
if it is determined that the second user is authorized to debug the first database server session, attaching the second database server session to the first database server session;
receiving from one of the first user and the second user a first request to access inactive private artifacts to test design time artifacts respectively associated with one of the first database server session and the second database server session;
determining with the token if the first request is from an authorized user; and
if the first request is from an authorized user, then:
activating the private artifacts in response to the received request;
creating a private runtime representation of the activate private artifacts; and
transmitting debugging information of the debugged server session via the non-transient connection to the other of the first user and the second user that did not provide the first request.

9. A computer-implemented method according to claim 8, further comprising:
executing server-side application program code in the first database server session;
prior to transmitting the debugging information, determining that execution has reached a breakpoint in the server-side application program code;
in response to determining that execution has reached the breakpoint, and prior to transmitting the debugging information, halting execution of the server-side application program code.

10. A computer-implemented method according to claim 8, wherein the first request conforms to HyperText Transfer Protocol protocol, and
wherein the second request and the third request conform to Web Socket protocol.

11. A computer-implemented method according to claim 8, further comprising:
receiving, from a third user, a fourth web-protocol request to establish a third database server session and to communicate with the third database server session via a second non-transient connection;
establishing the third database server session in response to the fourth request;
receiving, from the third user, a fifth web-protocol request to attach the third database server session to the first database server session;
attaching the third database server session to the first database server session; and
transmitting second debugging information of the first database server session to the third user via the second non-transient connection.

12. A computer-implemented method according to claim 11, further comprising:
executing server-side application program code in the first database server session;
prior to transmission of the debugging information, determining that execution has reached a breakpoint in the server-side application program code;
in response to determining that execution has reached the breakpoint, and prior to transmitting the debugging information and the second debugging information, halting execution of the server-side application program code.

13. A computer-implemented method according to claim 11, further comprising:
in response to the fifth request, determining whether the third user is authorized to debug the first database server session based on the stored authorization data.

14. A non-transitory computer-readable medium storing program code, the program code executable by a computer system to cause to the computer system to:
receive, from a first user, a first web-protocol request to establish a first database server session;
establish the first database server session in response to the first request;
receive, from a second user, a second web-protocol request to establish a second database server session and to communicate with the second database server session via a non-transient connection;
establish the second database server session in response to the second request;
receive a user interface from a client of one of the first database server session and the second database server session;
attach the user interface to one of the first database server session and the second database server session;
the user interface including program code configured to debug an application;
receive, from the second user, a third web-protocol request to attach the second database server session to the first database server session;
attach the second database server session to the first database server session;
receive a token from one of the first user and the second user, the token specifying that another of the first user and the second user is authorized to debug one or more of the server sessions;
receive from one of the first user and the second user a request to access inactive private artifacts to test design time artifacts respectively associated with one of the first database server session and the second database server session;
determine with the token if the first request is from an authorized user; and
if the first request is from an authorized user, then:
activate the private artifacts in response to the received request;
create a private runtime representation of the activate private artifacts; and
transmit debugging information of the debugged server session via the non-transient connection to the other of the first user and the second user that did not provide the first request.

15. A non-transitory computer-readable medium according to claim 14, wherein the program code is further executable by a computer system to cause to the computer system to:
execute server-side application program code in the first database server session;
prior to transmission of the debugging information, determine that execution has reached a breakpoint in the server-side application program code;
in response to the determination that execution has reached the breakpoint, and prior to transmission of the debugging information, halt execution of the server-side application program code.

16. A non-transitory computer-readable medium according to claim 14, wherein the first request conforms to HyperText Transfer Protocol protocol, and
wherein the second request and the third request conform to Web Socket protocol.

17. A non-transitory computer-readable medium according to claim 14, wherein the program code is further executable by a computer system to cause to the computer system to:
receive, from a third user, a fourth web-protocol request to establish a third database server session and to communicate with the third database server session via a second non-transient connection;
establish the third database server session in response to the fourth request;
receive, from the third user, a fifth web-protocol request to attach the third database server session to the first database server session;
attach the third database server session to the first database server session; and
transmit second debugging information of the first database server session to the third user via the second non-transient connection.

18. A non-transitory computer-readable medium according to claim 17, wherein the program code is further executable by a computer system to cause to the computer system to:
execute server-side application program code in the first database server session;
prior to transmission of the debugging information, determine that execution has reached a breakpoint in the server-side application program code;
in response to the determination that execution has reached the breakpoint, and prior to transmission of the debugging information and the second debugging information, halt execution of the server-side application program code.

19. A non-transitory computer-readable medium according to claim 17, wherein the program code is further executable by a computer system to cause to the computer system to:
determine, in response to the third request, whether the second user is authorized to debug the first database server session, and
determine, in response to the fifth request, whether the third user is authorized to debug the first database server session.

20. A non-transitory computer-readable medium according to claim 14, wherein the program code is further executable by a computer system to cause to the computer system to:
determine, in response to the third request, whether the second user is authorized to debug the first database server session.