Database-level container group management

Patent metadata

Field	Value
Publication number	US-11093443-B2
Application number	US-201715637531-A
Country	US
Kind code	B2
Filing date	Jun 29, 2017
Priority date	Jun 29, 2017
Publication date	Aug 17, 2021
Grant date	Aug 17, 2021

Abstract

A container group is created using a database deployment infrastructure (DI) administrator (HA). API privileges for the container group are granted, using the HA, to a container group administrator (GA). API privileges for a container created in the container group using the GA are granted, using the GA, to a container administrator (CA). API privileges for the container are granted, using the CA, to a container developer (CD). Schema privileges for the container are granted, using the CA, to a container consumer (CC). API privileges for the container group are revoked, using the HA, from the GA. The container group is dropped using the HA.

First claim

What is claimed is:

1. A computer-implemented method, comprising:
creating a container group using a database deployment infrastructure (DDI) administrator (DDIA), wherein the DDI is a service layer of a database, and wherein the container group comprises application programming interfaces (APIs) for performing administrative management tasks on an exclusive set of containers within the container group and isolates access to the exclusive set of containers from other container groups;
granting, using the DDIA, API privileges for the container group to a container group administrator (GA);
granting, using the GA, API privileges to a container administrator (CA) for a container created in the container group using the GA;
granting, using the CA, API privileges for the container to a container developer (CD);
granting, using the CA, schema privileges for the container to a container consumer (CC);
revoking, using the DDIA, the API privileges for the container group from the GA; and
dropping, using the DDIA, the container group.

2. The computer-implemented method of claim 1 , further comprising:
configuring, using the CA, container parameters for the container; and
configuring, using the CA, container libraries for the container.

3. The computer-implemented method of claim 1 , further comprising:
writing, using the CD, files to the container; and
making, using the CD, objects in the container.

4. The computer-implemented method of claim 1 , further comprising:
accessing, using the CC, data from objects in the container; and
executing, using the CC, functions or procedures in the container.

5. The computer-implemented method of claim 1 , further comprising:
revoking, using the CA, the schema privileges for the container from the CC; and
revoking, using the CA, the API privileges for the container from the CD.

6. The computer-implemented method of claim 1 , further comprising revoking, using the GA, the API privileges for the container from the CA.

7. The computer-implemented method of claim 1 , further comprising dropping, using the GA, the container.

8. A non-transitory, computer-readable medium storing one or more instructions executable by a computer system to perform operations comprising:
creating a container group using a database deployment infrastructure (DDI) administrator (DDIA), wherein the DDI is a service layer of a database, and wherein the container group comprises application programming interfaces (APIs) for performing administrative management tasks on an exclusive set of containers within the container group and isolates access to the exclusive set of containers from other container groups;
granting, using the DDIA, API privileges for the container group to a container group administrator (GA);
granting, using the GA, API privileges to a container administrator (CA) for a container created in the container group using the GA;
granting, using the CA, API privileges for the container to a container developer (CD);
granting, using the CA, schema privileges for the container to a container consumer (CC);
revoking, using the DDIA, the API privileges for the container group from the GA; and
dropping, using the DDIA, the container group.

9. The non-transitory, computer-readable medium of claim 8 , further comprising one or more instructions to:
configure, using the CA, container parameters for the container; and
configure, using the CA, container libraries for the container.

10. The non-transitory, computer-readable medium of claim 8 , further comprising one or more instructions to:
write, using the CD, files to the container; and
make, using the CD, objects in the container.

11. The non-transitory, computer-readable medium of claim 8 , further comprising one or more instructions to:
access, using the CC, data from objects in the container; and
execute, using the CC, functions or procedures in the container.

12. The non-transitory, computer-readable medium of claim 8 , further comprising one or more instructions to:
revoke, using the CA, the schema privileges for the container from the CC; and
revoke, using the CA, the API privileges for the container from the CD.

13. The non-transitory, computer-readable medium of claim 8 , further comprising one or more instructions to revoke, using the GA, the API privileges for the container from the CA.

14. The non-transitory, computer-readable medium of claim 8 , further comprising one or more instructions to drop, using the GA, the container.

15. A computer-implemented system, comprising:
a computer memory; and
a hardware processor interoperably coupled using the computer memory and configured to perform operations comprising:
creating a container group using a database deployment infrastructure (DDI) administrator (DDIA), wherein the DDI is a service layer of a database, and wherein the container group comprises application programming interfaces (APIs) for performing administrative management tasks on an exclusive set of containers within the container group and isolates access to the exclusive set of containers from other container groups;
granting, using the DDIA, API privileges for the container group to a container group administrator (GA);
granting, using the GA, API privileges to a container administrator (CA) for a container created in the container group using the GA;
granting, using the CA, API privileges for the container to a container developer (CD);
granting, using the CA, schema privileges for the container to a container consumer (CC);
revoking, using the DDIA, the API privileges for the container group from the GA; and
dropping, using the DDIA, the container group.

16. The computer-implemented system of claim 15 , further comprising one or more instructions to:
configure, using the CA, container parameters for the container; and
configure, using the CA, container libraries for the container.

17. The computer-implemented system of claim 15 , further configured to:
write, using the CD, files to the container; and
make, using the CD, objects in the container.

18. The computer-implemented system of claim 15 , further configured to:
access, using the CC, data from objects in the container; and
execute, using the CC, functions or procedures in the container.

19. The computer-implemented system of claim 15 , further configured to:
revoke, using the CA, the schema privileges for the container from the CC; and
revoke, using the CA, the API privileges for the container from the CD.

20. The computer-implemented system of claim 15 , further configured to:
revoke, using the GA, the API privileges for the container from the CA; and
drop, using the GA, the container.

Assignees

• Sap Se

Inventors

• Bregler Jonathan
• Bunte Alexander
• Harren Arne
• Kellner Andreas
• Kuntze Daniel
• Lueders Simon
• Sauermann Volker
• Schnaubelt Michael
• Tran Le-Huan Stefan

Classifications

• G06F16/21 Primary

  Design, administration or maintenance of databases · CPC title

• G06F8/70

  Software maintenance or management · CPC title

• G06F9/445

  Program loading or initiating (bootstrapping G06F9/4401; security arrangements for program loading or initiating G06F21/57) · CPC title

• G06F8/60

  Software deployment · CPC title

• G06F16/285

  Clustering or classification · CPC title