Patent ID: 12248491

DETAILED DESCRIPTION

Exemplary methods, apparatus, and products for managing access to usage data on a cloud-based data warehouse in accordance with the present invention are described with reference to the accompanying drawings, beginning withFIG.1.FIG.1sets forth a block diagram of automated computing machinery comprising an exemplary intermediary computing system152configured for managing access to usage data on a cloud-based data warehouse according to embodiments of the present invention. The intermediary computing system152ofFIG.1includes at least one computer processor156or ‘CPU’ as well as random access memory168(‘RAM’) which is connected through a high speed memory bus166and bus adapter158to processor156and to other components of the intermediary computing system152.

Stored in RAM168is an operating system154. Operating systems useful in computers configured for managing access to usage data on a cloud-based data warehouse according to embodiments of the present invention include UNIX™, Linux™, Microsoft Windows™, AIX™ and others as will occur to those of skill in the art. The operating system154in the example ofFIG.1is shown in RAM168, but many components of such software typically are stored in non-volatile memory also, such as, for example, on data storage170, such as a disk drive. Also stored in RAM is the table manager126, a module for managing access to usage data on a cloud-based data warehouse according to embodiments of the present invention.

The intermediary computing system152ofFIG.1includes disk drive adapter172coupled through expansion bus160and bus adapter158to processor156and other components of the intermediary computing system152. Disk drive adapter172connects non-volatile data storage to the intermediary computing system152in the form of data storage170. Disk drive adapters useful in computers configured for managing access to usage data on a cloud-based data warehouse according to embodiments of the present invention include Integrated Drive Electronics (IDE′) adapters, Small Computer System Interface (SCSI′) adapters, and others as will occur to those of skill in the art. Non-volatile computer memory also may be implemented for as an optical disk drive, electrically erasable programmable read-only memory (so-called ‘EEPROM’ or ‘Flash’ memory), RAM drives, and so on, as will occur to those of skill in the art.

The example intermediary computing system152ofFIG.1includes one or more input/output (‘I/O’) adapters178. I/O adapters implement user-oriented input/output through, for example, software drivers and computer hardware for controlling output to display devices such as computer display screens, as well as user input from user input devices181such as keyboards and mice. The example intermediary computing system152ofFIG.1includes a video adapter209, which is an example of an I/O adapter specially designed for graphic output to a display device180such as a display screen or computer monitor. Video adapter209is connected to processor156through a high speed video bus164, bus adapter158, and the front side bus162, which is also a high speed bus.

The exemplary intermediary computing system152ofFIG.1includes a communications adapter167for data communications with other computers and for data communications with a data communications network. Such data communications may be carried out serially through RS-232 connections, through external buses such as a Universal Serial Bus (‘USB’), through data communications networks such as IP data communications networks, and in other ways as will occur to those of skill in the art. Communications adapters implement the hardware level of data communications through which one computer sends data communications to another computer, directly or through a data communications network. Examples of communications adapters useful in computers configured for managing access to usage data on a cloud-based data warehouse according to embodiments of the present invention include modems for wired dial-up communications, Ethernet (IEEE 802.3) adapters for wired data communications, and 802.11 adapters for wireless data communications.

The communications adapter167is communicatively coupled to a wide area network190that also includes a cloud-based data warehouse192and a client computing system194. The cloud-based data warehouse192is a computing system or group of computing systems that hosts a database or databases for access over the wide area network190. The client computing system194is a computing system that accesses the database using the table manager126.

FIG.2shows an exemplary system for managing access to usage data on a cloud-based data warehouse according to embodiments of the present invention. As shown inFIG.2, the system includes a client computing system194, an intermediary computing system152, and a cloud-based data warehouse192. The client computing system194includes a graphical user interface (GUI)202. The intermediary computing system152includes a table manager126. The cloud-based data warehouse192includes a database204. The client computing system194may access the cloud-based data warehouse192and database204via the table manager on the intermediary computing system152.

The GUI202is a visual presentation configured to present data sets in the form of worksheets, workbooks, and graphical elements to a user. The GUI202also receives requests from a user for data sets from the database204. The GUI202may also present to the user the ability to add a new row into a data set or table and enter values for each column of the new row. The GUI202may be presented, in part, by the table manager126and displayed on a client computing system194(e.g., on a system display or mobile touchscreen). The GUI202may be part of an Internet application that includes the table manager126and is hosted on the intermediary computing system152.

The database204is a collection of data and a management system for the data. A data set is a collection of data (such as a table) from the database204. Data sets may be organized into columns and rows (also referred to as records). The particular columns, rows, and organization of the columns and rows that make up a data set may be specified in the database statement requesting the data set. Data sets may be sent from the cloud-based data warehouse192in response to a database statement (also referred to as a query). Accordingly, data sets retrieved in response to a database statement may be referred to as query results.

The table manager126is hardware, software, or an aggregation of hardware and software configured to receive instructions in the form of state specifications from the client computing system194, via the GUI202. The table manager126is also configured to generate database statements in response to manipulations of the GUI202described in the state specification.

The state specification is a collection of data describing inputs into the GUI202. The state specification may include manipulations of GUI elements within the GUI202along with data entered into the GUI202by a user of the client computing system194. Such manipulations and data may indicate requests for and manipulations of data sets. Such manipulations and data may also indicate requests to edit an existing row or create a new row and values for that row. The state specification may be a standard file format used to exchange data in asynchronous browser-server communication. For example, the state specification may be a JavaScript Object Notation specification. The state specification may also include descriptions of elements that are used to apply changes to the data set. Such elements may include filters applied to the worksheet, the hierarchical level of the worksheet, joins performed within the worksheet, exposable parameters in the worksheet, and security for the worksheet.

The table manager126uses the state specification as input to generate a database statement. This database statement generation process may begin with state specification being converted into an abstract syntax tree. The abstract syntax tree may then be canonicalized into a canonicalized hierarchy. The canonicalized hierarchy may then be linearized into the worksheet algebra. The worksheet algebra may then be lowered into a relational algebra, which may then be lowered into the database statement.

The table manager126may use the database statement to fetch query results (i.e. a data set) from the database204. The table manager126may then present the query results to a user via the GUI202. The table manager126may further manage tables on the database202to which a user has made edits, such as adding new rows or editing existing rows. Further, the table manager126may add columns to new rows and create new tables on the database202.

FIG.3shows an exemplary system for managing access to usage data on a cloud-based data warehouse according to embodiments of the present invention. As shown inFIG.3, the exemplary GUI202includes a spreadsheet structure302and a list structure304. The spreadsheet structure302includes a worksheet (shown as empty rows) with six columns (column A306A, column B306B, column C306C, column D306D, column E306E, column F306F). The combination of a worksheet and dynamic graphic elements may be referred to as a workbook.

The spreadsheet structure302is a graphical element and organizing mechanism for a worksheet that presents a data set. A worksheet is a presentation of a data set (such as a table) from a database on a data warehouse. The spreadsheet structure302displays the worksheet as rows of data organized by columns (column A306A, column B306B, column C306C, column D306D, column E306E, column F306F). The columns delineate different categories of the data in each row of the worksheet. The columns may also be calculation columns that include calculation results using other columns in the worksheet.

The list structure304is a graphical element used to define and organize the hierarchical relationships between the columns (column A306A, column B306B, column C306C, column D306D, column E306E, column F306F) of the data set. The term “hierarchical relationship” refers to subordinate and superior groupings of columns. For example, a database may include rows for an address book, and columns for state, county, city, and street. A data set from the database may be grouped first by state, then by county, and then by city. Accordingly, the state column would be at the highest level in the hierarchical relationship, the county column would be in the second level in the hierarchical relationship, and the city column would be at the lowest level in the hierarchical relationship.

The list structure304presents a dimensional hierarchy to the user. Specifically, the list structure304presents levels arranged hierarchically across at least one dimension. Each level within the list structure304is a position within a hierarchical relationship between columns (column A306A, column B306B, column C306C, column D306D, column E306E, column F306F). The keys within the list structure304identify the one or more columns that are the participants in the hierarchical relationship. Each level may have more than one key.

One of the levels in the list structure304may be a base level. Columns selected for the base level provide data at the finest granularity. One of the levels in the list structure304may be a totals or root level. Columns selected for the totals level provide data at the highest granular level. For example, the totals level may include a field that calculates the sum of each row within a single column of the entire data set (i.e., not partitioned by any other column).

The GUI202may enable a user to drag and drop columns (column A306A, column B306B, column C306C, column D306D, column E306E, column F306F) into the list structure304. The order of the list structure304may specify the hierarchy of the columns relative to one another. A user may be able to drag and drop the columns in the list structure304at any time to redefine the hierarchical relationship between columns. The hierarchical relationship defined using the columns selected as keys in the list structure304may be utilized in charts such that drilling down (e.g., double click on a bar), enables a new chart to be generated based on a level lower in the hierarchy.

The GUI202may also include a mechanism for a user to request a table from a database to be presented as a worksheet in the GUI202. Such a mechanism may be part of the interactivity of the worksheet. Specifically, a user may manipulate a worksheet (e.g., by dragging and dropping columns or rows, resorting columns or rows, etc.) and, in response, the GUI202may generate a request (e.g., in the form of a state specification) for a data set and send the request to the table manager126. Such a mechanism may also include a direct identification of the rows and columns of a database table that a user would like to access (e.g., via a selection of the rows and columns in a dialog box). The GUI202may also include a mechanism for a user to create a new table on the database, add rows to a table, and move rows within the table.

For further explanation,FIG.4sets forth a flow chart illustrating an exemplary method for managing access to usage data on a cloud-based data warehouse according to embodiments of the present invention that includes storing402, by a table manager126, usage data for a plurality of organizations in a table within a cloud-base data warehouse192. Users associated with each organization may utilize the table manager126to access cloud-based data warehouses associated with that user's organization. Specifically, users may utilize the table manager126to retrieve and manipulate data stored within databases on the organization's cloud-based data warehouse. Interactions between user and the organization's database(s) facilitated by the table manager126may be logged by the table manager126in a separate cloud-based data warehouse192under the control of the table manager126. Such interactions are referred to as usage data and may include logins/logouts, queries made, events, schedules, information about user-created tables, information about user teams, information about documents created, etc. Some users of the organization, such as a database administrator, may want access to the usage data created and stored by the table manager126on the cloud-based data warehouse192.

Storing402the usage data in the table may be carried out by monitoring activities (i.e., interactions between users and the table manager126) for each user associated with each of the plurality of organizations and storing information about the monitored activities in at least one table within the database on the cloud-based data warehouse under the control of the table manager126. The usage data may be stored across multiple tables within the database. For example, one table may store logins, another may store logouts, etc. Further, each table may include usage data for multiple organizations. The table manager126may provide access to the usage data for one organization without also disclosing usage data for the other organizations stored on the same table.

An organization is a group of users that utilize the table manager126to access one or more databases under the control of the organization. Each member of the organization may have credentials to access the table manager126and authorization (either direct or via the table manager) to access one or more databases under the control of the organization. The organization may be a company and the users may be employees of that company.

The method ofFIG.4also includes receiving404, by the table manager126from a first client, a request420for usage data for a first organization of the plurality of organizations, wherein the first client is associated with the first organization. Receiving404the request420for usage data for the first organization may be carried out by detecting that a user has manipulated elements of the GUI and/or submitted data using the GUI such that the generation of the request420is triggered, and the request420is sent to the table manager126. The request420may be received in the form of a state specification from the GUI. Specifically, each change to the GUI may result in a new or updated state specification420that operates as an request to the table manager126.

The first client may be associated with the first organization in a variety of ways. For example, the first client may be a member of the first organization, such as an employee of the organization company. Alternatively, the first client may be authorized by the first organization to access the usage data for the first organization. Further, the first client may be utilizing a client computing system communicatively coupled to an intermediary computing system hosting the table manager126.

The request420for usage data for the first organization may include an instruction to manipulate the usage data for the first organization. Manipulating the usage data may include executing operations on the data set of usage data requested. Such operations may include calculations utilizing elements of the data set as inputs, combining elements from different tables, or other database operations.

The method ofFIG.4also includes retrieving406, by the table manager126, the requested usage data for the first organization using a parameterized connection to the cloud-based data warehouse192, wherein the parameterized connection provides access to the usage data for the first organization and blocks access to usage data for each other organization in the plurality of organizations. The parameterized connection provides access to the cloud-based data warehouse192by the table manager126and is presented to the first client as though the connection were under the first client's control. The first client initiates retrieval of usage data through the parameterized connection as though the first client has unlimited access to the cloud-based data warehouse. However, the parameterized connection limits access to only the portions of the tables associated with the first organization.

The parameterized connection filters out the usage data for each other organization in the plurality of organizations. Specifically, the parameterized connection may apply filters or other limitations on the request from the first client. The filters or other limitations ensure that the first client is only given access to the usage data for the first organization. For example, the first client may request all rows of a login table. In response, the table manager126transmits the request via the parameterized connection, which limits the request to only the portions of the login table for the first client's organization.

Retrieving406the requested usage data for the first organization using the parameterized connection may be carried out by submitting credentials to the cloud-based data warehouse to authenticate the table manager126and enable the table manager to retrieve the requested usage data. The credentials used to access the cloud-based data warehouse using the parameterized connection may be credentials that authenticate the table manager126(as opposed to the first client). Specifically, the first client may not have access to the cloud-based data warehouse192because the cloud-based data warehouse is under the control of the table manager126. The table manager provides access to the cloud-based data warehouse192using the parameterized connection, thereby limiting the access granted to the first client to only portions of the tables on the database related to the first organization. Once the usage data is retrieved by the table manager126, the table manager126provides the usage data to the first client via the GUI on the client computing system.

Subsequent to servicing the request from the first client, a second client may request usage data for a second organization. The table manager126may again proceed using the steps described above. Specifically, the table manager126may then retrieve the requested usage data for the second organization using a different parameterized connection that limits the access granted to the second client to only portions of the tables on the database related to the second organization. The first and second clients may request the same data set from the same table on the database, but through parameterized connections unique to each client, the first and second clients each receive entirely different query results which do not overlap.

The above limitations improve the operation of the computer system by providing access to usage data for different organizations from the same tables and database while maintaining a separation between different usage data for different organizations. This is accomplished using different parameterized connections for each organization and associated clients. The parameterized connections limit the client's access to only the usage data for that client's organization.

For further explanation,FIG.5sets forth a flow chart illustrating a further exemplary method for managing access to usage data on a cloud-based data warehouse according to embodiments of the present invention that includes storing402, by a table manager126, usage data for a plurality of organizations in a table within a cloud-base data warehouse192; receiving404, by the table manager126from a first client, a request420for usage data for a first organization of the plurality of organizations, wherein the first client is associated with the first organization; and retrieving406, by the table manager126, the requested usage data for the first organization using a parameterized connection to the cloud-based data warehouse192, wherein the parameterized connection provides access to the usage data for the first organization and blocks access to usage data for each other organization in the plurality of organizations.

The method ofFIG.5differs from the method ofFIG.4, however, in that retrieving406, by the table manager126, the requested usage data for the first organization using a parameterized connection to the cloud-based data warehouse192further includes generating502a database statement targeting the table on the cloud-based data warehouse192; and generating504the parameterized connection using an organization identifier for the first organization.

Generating502a database statement targeting the table on the cloud-based data warehouse192may be carried out by lowering the received request420into a database statement. The received request420may be converted into various intermediary forms, such as the abstract syntax tree, canonicalized hierarchy, worksheet algebra, and relational algebra described above. Once generated, the database statement is issued to the cloud-based data warehouse192and in response, the cloud-based data warehouse provides the usage data in the form of query results. The database statement may be a structured query language statement.

Generating504the parameterized connection using an organization identifier for the first organization may be carried out by retrieving the organization identifier for the organization associated with the first client. The organization identifier may be received in the request420or may be part of the authentication of the first client to the table manger126. Alternatively, the table manager126may maintain a data structure that maps clients to organization identifiers. The organization identifier may then be used to set filters or other limitations in the parameterized connection that prevents the client from retrieving any usage data that is not associated with that client's organization.

In view of the explanations set forth above, readers will recognize that the benefits of managing access to usage data on a cloud-based data warehouse according to embodiments of the present invention include:Improving the operation of the computer system by providing access to usage data for different organizations from the same tables and database, increasing system functionality.Improving the operation of a computing system by maintaining a separation between different usage data for different organizations stored on the same tables and database, decreasing system complexity and increasing resiliency.

Exemplary embodiments of the present invention are described largely in the context of a fully functional computer system for managing access to usage data on a cloud-based data warehouse. Readers of skill in the art will recognize, however, that the present invention also may be embodied in a computer program product disposed upon computer readable storage media for use with any suitable data processing system. Such computer readable storage media may be any storage medium for machine-readable information, including magnetic media, optical media, or other suitable media. Examples of such media include magnetic disks in hard drives or diskettes, compact disks for optical drives, magnetic tape, and others as will occur to those of skill in the art. Persons skilled in the art will immediately recognize that any computer system having suitable programming means will be capable of executing the steps of the method of the invention as embodied in a computer program product. Persons skilled in the art will recognize also that, although some of the exemplary embodiments described in this specification are oriented to software installed and executing on computer hardware, nevertheless, alternative embodiments implemented as firmware or as hardware are well within the scope of the present invention.

The present invention may be a system, a method, and/or a computer program product. The computer program product may include a computer readable storage medium (or media) having computer readable program instructions thereon for causing a processor to carry out aspects of the present invention.

The computer readable storage medium can be a tangible device that can retain and store instructions for use by an instruction execution device. The computer readable storage medium may be, for example, but is not limited to, an electronic storage device, a magnetic storage device, an optical storage device, an electromagnetic storage device, a semiconductor storage device, or any suitable combination of the foregoing. A non-exhaustive list of more specific examples of the computer readable storage medium includes the following: a portable computer diskette, a hard disk, a random access memory (RAM), a read-only memory (ROM), an erasable programmable read-only memory (EPROM or Flash memory), a static random access memory (SRAM), a portable compact disc read-only memory (CD-ROM), a digital versatile disk (DVD), a memory stick, a floppy disk, a mechanically encoded device such as punch-cards or raised structures in a groove having instructions recorded thereon, and any suitable combination of the foregoing. A computer readable storage medium, as used herein, is not to be construed as being transitory signals per se, such as radio waves or other freely propagating electromagnetic waves, electromagnetic waves propagating through a waveguide or other transmission media (e.g., light pulses passing through a fiber-optic cable), or electrical signals transmitted through a wire.

Computer readable program instructions described herein can be downloaded to respective computing/processing devices from a computer readable storage medium or to an external computer or external storage device via a network, for example, the Internet, a local area network, a wide area network and/or a wireless network. The network may comprise copper transmission cables, optical transmission fibers, wireless transmission, routers, firewalls, switches, gateway computers and/or edge servers. A network adapter card or network interface in each computing/processing device receives computer readable program instructions from the network and forwards the computer readable program instructions for storage in a computer readable storage medium within the respective computing/processing device.

Computer readable program instructions for carrying out operations of the present invention may be assembler instructions, instruction-set-architecture (ISA) instructions, machine instructions, machine dependent instructions, microcode, firmware instructions, state-setting data, or either source code or object code written in any combination of one or more programming languages, including an object oriented programming language such as Smalltalk, C++ or the like, and conventional procedural programming languages, such as the “C” programming language or similar programming languages. The computer readable program instructions may execute entirely on the user's computer, partly on the user's computer, as a stand-alone software package, partly on the user's computer and partly on a remote computer or entirely on the remote computer or server. In the latter scenario, the remote computer may be connected to the user's computer through any type of network, including a local area network (LAN) or a wide area network (WAN), or the connection may be made to an external computer (for example, through the Internet using an Internet Service Provider). In some embodiments, electronic circuitry including, for example, programmable logic circuitry, field-programmable gate arrays (FPGA), or programmable logic arrays (PLA) may execute the computer readable program instructions by utilizing state information of the computer readable program instructions to personalize the electronic circuitry, in order to perform aspects of the present invention.

Aspects of the present invention are described herein with reference to flowchart illustrations and/or block diagrams of methods, apparatus (systems), and computer program products according to embodiments of the invention. It will be understood that each block of the flowchart illustrations and/or block diagrams, and combinations of blocks in the flowchart illustrations and/or block diagrams, can be implemented by computer readable program instructions.

These computer readable program instructions may be provided to a processor of a general purpose computer, special purpose computer, or other programmable data processing apparatus to produce a machine, such that the instructions, which execute via the processor of the computer or other programmable data processing apparatus, create means for implementing the functions/acts specified in the flowchart and/or block diagram block or blocks. These computer readable program instructions may also be stored in a computer readable storage medium that can direct a computer, a programmable data processing apparatus, and/or other devices to function in a particular manner, such that the computer readable storage medium having instructions stored therein comprises an article of manufacture including instructions which implement aspects of the function/act specified in the flowchart and/or block diagram block or blocks.

The computer readable program instructions may also be loaded onto a computer, other programmable data processing apparatus, or other device to cause a series of operational steps to be performed on the computer, other programmable apparatus or other device to produce a computer implemented process, such that the instructions which execute on the computer, other programmable apparatus, or other device implement the functions/acts specified in the flowchart and/or block diagram block or blocks.

The flowchart and block diagrams in the Figures illustrate the architecture, functionality, and operation of possible implementations of systems, methods, and computer program products according to various embodiments of the present invention. In this regard, each block in the flowchart or block diagrams may represent a module, segment, or portion of instructions, which comprises one or more executable instructions for implementing the specified logical function(s). In some alternative implementations, the functions noted in the block may occur out of the order noted in the figures. For example, two blocks shown in succession may, in fact, be executed substantially concurrently, or the blocks may sometimes be executed in the reverse order, depending upon the functionality involved. It will also be noted that each block of the block diagrams and/or flowchart illustration, and combinations of blocks in the block diagrams and/or flowchart illustration, can be implemented by special purpose hardware-based systems that perform the specified functions or acts or carry out combinations of special purpose hardware and computer instructions.

It will be understood from the foregoing description that modifications and changes may be made in various embodiments of the present invention without departing from its true spirit. The descriptions in this specification are for purposes of illustration only and are not to be construed in a limiting sense. The scope of the present invention is limited only by the language of the following claims.