Support for multi-type users in a single-type computing system

Patent metadata

Field	Value
Publication number	US-11516307-B1
Application number	US-202117397480-A
Country	US
Kind code	B1
Filing date	Aug 9, 2021
Priority date	Aug 9, 2021
Publication date	Nov 29, 2022
Grant date	Nov 29, 2022

Abstract

Persistent storage contains a parent table and one or more child tables, the parent table containing: a class field specifying types, and one or more filter fields. One or more processors may: receive a first request to read first information of a first type for a first entity; determine that, in a first entry of the parent table for the first entity, the first type is specified in the class field; obtain the first information from a child table associated with the first type; receive a second request to read second information of a second type for a second entity; determine that, in a second entry of the parent table for the second entity, the second type is indicated as present by a filter field that is associated with the second type; and obtain the second information from a set of additional fields in the second entry.

First claim

What is claimed is:

1. A system comprising:
persistent storage containing a parent table and one or more child tables, wherein the parent table contains: (i) a class field specifying types, and (ii) one or more type-specific filter fields, wherein the types are respectively associated with different tables from the one or more child tables, and wherein the one or more type-specific filter fields are respectively associated with one or more of the types; and
one or more processors configured to:
receive a first request to read, from the persistent storage, first type-specific information of a first type for a first entity;
determine that, in a first entry of the parent table for the first entity, the first type is specified in the class field;
obtain the first type-specific information from a particular child table of the one or more child tables, wherein the particular child table is associated with the first type;
provide the first type-specific information in response to the first request;
receive a second request to read, from the persistent storage, second type-specific information of a second type for a second entity;
determine that, in a second entry of the parent table for the second entity, the second type is indicated as present by a particular type-specific filter field that is associated with the second type;
obtain the second type-specific information from a set of additional fields in the second entry of the parent table, wherein the set of additional fields is associated with the particular type-specific filter field; and
provide the second type-specific information in response to the second request.

2. The system of claim 1 , wherein the one or more processors are further configured to:
receive a third request to read, from the persistent storage, third type-specific information of the second type for the first entity;
determine that, in the first entry of the parent table, the second type is indicated as present by the particular type-specific filter field;
obtain the third type-specific information from the set of additional fields in the first entry of the parent table; and
provide the third type-specific information in response to the third request.

3. The system of claim 1 , wherein the one or more processors are further configured to:
search the parent table for the first entity; and
determine that the first entry is associated with the first entity.

4. The system of claim 1 , wherein the one or more type-specific filter fields are respectively associated with one or more additional fields in the parent table.

5. The system of claim 1 , wherein the first entity is a first user and the second entity is a second user, and wherein the first type-specific information and the second type-specific information each relate to one or more of logging on to the system, permissions to access specific units of data in the persistent storage, or presentation of material on a graphical user interface.

6. The system of claim 1 , wherein obtaining the first type-specific information comprises reading, from fields of an entry in the particular child table associated with the first entity, the first type-specific information.

7. The system of claim 6 , wherein the first entity is associated with a unique identifier, wherein the first entry of the parent table contains the unique identifier, wherein the entry in the particular child table contains the unique identifier, and wherein reading the first type-specific information comprises:
searching entries of the particular child table for the unique identifier; and
locating the unique identifier in the entry in the particular child table.

8. The system of claim 1 , wherein the one or more processors are further configured to:
determine that, in the second entry of the parent table, the second type is not specified in the class field, wherein the particular type-specific filter field is considered based on the second type being not specified in the class field.

9. The system of claim 1 , wherein the one or more processors are further configured to:
receive a third request to write, to the persistent storage, third type-specific information of the first type for the first entity;
determine that, in the first entry of the parent table, the first type is specified in the class field;
write, to the particular child table, the third type-specific information;
receive a fourth request to write, to the persistent storage, fourth type-specific information of the second type for the second entity;
determine that, in the second entry of the parent table, the second type is indicated as present by the particular type-specific filter field that is associated with the second type; and
write, to the set of additional fields in the parent table, the fourth type-specific information.

10. The system of claim 1 , wherein obtaining the first type-specific information occurs in response to determining that, in the first entry of the parent table for the first entity, the first type is specified in the class field, and wherein obtaining the second type-specific information occurs in response to determining that, in the second entry of the parent table for the second entity, the second type is indicated as present by the particular type-specific filter field that is associated with the second type.

11. A computer-implemented method comprising:
receiving a first request to read, from persistent storage, first type-specific information of a first type for a first entity, wherein the persistent storage contains a parent table and one or more child tables, wherein the parent table contains: (i) a class field specifying types, and (ii) one or more type-specific filter fields, wherein the types are respectively associated with different tables from the one or more child tables, and wherein the one or more type-specific filter fields are respectively associated with one or more of the types;
determining that, in a first entry of the parent table for the first entity, the first type is specified in the class field;
obtaining the first type-specific information from a particular child table of the one or more child tables, wherein the particular child table is associated with the first type;
providing the first type-specific information in response to the first request;
receiving a second request to read, from the persistent storage, second type-specific information of a second type for a second entity;
determining that, in a second entry of the parent table for the second entity, the second type is indicated as present by a particular type-specific filter field that is associated with the second type;
obtaining the second type-specific information from a set of additional fields in the second entry of the parent table, wherein the set of additional fields is associated with the particular type-specific filter field; and
providing the second type-specific information in response to the second request.

12. The computer-implemented method of claim 11 , further comprising:
receiving a third request to read, from the persistent storage, third type-specific information of the second type for the first entity;
determining that, in the first entry of the parent table, the second type is indicated as present by the particular type-specific filter field;
obtaining the third type-specific information from the set of additional fields in the first entry of the parent table; and
providing the third type-specific information in response to the third request.

13. The computer-implemented method of claim 11 , further comprising:
searching the parent table for the first entity; and
determining that the

Assignees

• Servicenow Inc

Inventors

• Seguin Vincent
• Casey Patrick
• Schumann David
• Lee Szu-Hsuan

Classifications

• G06F21/6281

  at program execution time, where the protection is within the operating system · CPC title

• G06F21/604 Primary

  Tools and structures for managing or administering access control systems · CPC title

• H04L67/561 Primary

  Adding application-functional data or data for application control, e.g. adding metadata · CPC title

• G06F2221/2113

  Multi-level security, e.g. mandatory access control · CPC title

• G06F2221/2141

  Access rights, e.g. capability lists, access control lists, access tables, access matrices · CPC title