Database-level container group management

Patent metadata

Field	Value
Publication number	US-11816064-B2
Application number	US-202117398167-A
Country	US
Kind code	B2
Filing date	Aug 10, 2021
Priority date	Jun 29, 2017
Publication date	Nov 14, 2023
Grant date	Nov 14, 2023

Abstract

A container group is created using a database deployment infrastructure (DI) administrator (HA). API privileges for the container group are granted, using the HA, to a container group administrator (GA). API privileges for a container created in the container group using the GA are granted, using the GA, to a container administrator (CA). API privileges for the container are granted, using the CA, to a container developer (CD). Schema privileges for the container are granted, using the CA, to a container consumer (CC). API privileges for the container group are revoked, using the HA, from the GA. The container group is dropped using the HA.

First claim

What is claimed is:

1. A computer-implemented method, comprising:
creating a first container group using a database deployment infrastructure (DDI) administrator (DDIA), wherein the DDI is a service layer of a database, and wherein the first container group comprises application programming interfaces (APIs) for performing administrative management tasks on an exclusive set of containers within the first container group and isolates access to the exclusive set of containers from other container groups;
granting, using the DDIA, API privileges for the first container group to a first container group administrator (GA 1 );
creating, using the GA 1 , a first container in the first container group;
creating, using the DDIA, a second container group;
granting, using the DDIA, API privileges for the second container group to a second container group administrator (GA 2 ); and
moving, using the DDIA, the first container from the first container group to the second container group.

2. The computer-implemented method of claim 1 , further comprising:
configuring, using the GA 2 , first container parameters for the first container; and
configuring, using the GA 2 , first container libraries for the first container.

3. The computer-implemented method of claim 1 , further comprising:
granting, using the GA 1 , API privileges for the first container to a container administrator (CA).

4. The computer-implemented method of claim 1 , further comprising:
granting, using the GA 2 , API privileges for the first container to a container developer (CD).

5. The computer-implemented method of claim 1 , further comprising:
dropping, using the GA 2 , the first container.

6. The computer-implemented method of claim 1 , further comprising:
revoking, using the DDIA, the API privileges for the first container group from the GA 1 ; and
dropping, using the DDIA, the first container group.

7. The computer-implemented method of claim 1 , further comprising:
revoking, using the DDIA, the API privileges for the second container group from the GA 2 ; and
dropping, using the DDIA, the second container group.

8. A non-transitory, computer-readable medium storing one or more instructions executable by a computer system to perform operations comprising:
creating a first container group using a database deployment infrastructure (DDI) administrator (DDIA), wherein the DDI is a service layer of a database, and wherein the first container group comprises application programming interfaces (APIs) for performing administrative management tasks on an exclusive set of containers within the first container group and isolates access to the exclusive set of containers from other container groups;
granting, using the DDIA, API privileges for the first container group to a first container group administrator (GA 1 );
creating, using the GA 1 , a first container in the first container group;
creating, using the DDIA, a second container group;
granting, using the DDIA, API privileges for the second container group to a second container group administrator (GA 2 ); and
moving, using the DDIA, the first container from the first container group to the second container group.

9. The non-transitory, computer-readable medium of claim 8 , further comprising:
configuring, using the GA 2 , first container parameters for the first container; and
configuring, using the GA 2 , first container libraries for the first container.

10. The non-transitory, computer-readable medium of claim 8 , further comprising:
granting, using the GA 1 , API privileges for the first container to a container administrator (CA).

11. The non-transitory, computer-readable medium of claim 8 , further comprising:
granting, using the GA 2 , API privileges for the first container to a container developer (CD).

12. The non-transitory, computer-readable medium of claim 8 , further comprising:
dropping, using the GA 2 , the first container.

13. The non-transitory, computer-readable medium of claim 8 , further comprising:
revoking, using the DDIA, the API privileges for the first container group from the GA 1 ; and
dropping, using the DDIA, the first container group.

14. The non-transitory, computer-readable medium of claim 8 , further comprising:
revoking, using the DDIA, the API privileges for the second container group from the GA 2 ; and
dropping, using the DDIA, the second container group.

15. A computer-implemented system, comprising:
at least one processor;
a non-transitory computer-readable storage medium coupled to the at least one processor and storing programming instructions for execution by the at least one processor, wherein the programming instructions instruct the at least one processor to:
create a first container group using a database deployment infrastructure (DDI) administrator (DDIA), wherein the DDI is a service layer of a database, and wherein the first container group comprises application programming interfaces (APIs) for performing administrative management tasks on an exclusive set of containers within the first container group and isolates access to the exclusive set of containers from other container groups;
grant, using the DDIA, API privileges for the first container group to a first container group administrator (GA 1 );
create, using the GA 1 , a first container in the first container group;
create, using the DDIA, a second container group;
grant, using the DDIA, API privileges for the second container group to a second container group administrator (GA 2 ); and
move, using the DDIA, the first container from the first container group to the second container group.

16. The computer-implemented system of claim 15 , wherein the programming instructions further instruct the at least one processor to:
configure, using the GA 2 , first container parameters for the first container; and
configure, using the GA 2 , first container libraries for the first container.

17. The computer-implemented system of claim 15 , wherein the programming instructions further instruct the at least one processor to:
grant, using the GA 1 , API privileges for the first container to a container administrator (CA).

18. The computer-implemented system of claim 15 , wherein the programming instructions further instruct the at least one processor to:
granting, using the GA 2 , API privileges for the first container to a container developer (CD).

19. The computer-implemented system of claim 15 , wherein the programming instructions further instruct the at least one processor to:
drop, using the GA 2 , the first container.

20. The computer-implemented system of claim 15 , wherein the programming instructions further instruct the at least one processor to:
revoke, using the DDIA, the API privileges for the first container group from the GA 1 ; drop, using the DDIA, the first container group;
revoke, using the DDIA, the API privileges for the second container group from the GA 2 ; and
drop, using the DDIA, the second container group.

Assignees

• Sap Se

Inventors

• Bregler Jonathan
• Bunte Alexander
• Harren Arne
• Kellner Andreas
• Kuntze Daniel
• Lueders Simon
• Sauermann Volker
• Schnaubelt Michael
• Tran Le-Huan Stefan

Classifications

• G06F16/122 Primary

  using management policies (point-in-time backing up or restoration of persistent data G06F11/1446; file migration policies for HSM systems G06F16/185) · CPC title

• G06F8/60

  Software deployment · CPC title

• G06F8/70

  Software maintenance or management · CPC title

• G06F9/445

  Program loading or initiating (bootstrapping G06F9/4401; security arrangements for program loading or initiating G06F21/57) · CPC title

• G06F16/21 Primary

  Design, administration or maintenance of databases · CPC title