Multi-modal user authorization in group-based communication systems

Patent metadata

Field	Value
Publication number	US-12199985-B2
Application number	US-201816201515-A
Country	US
Kind code	B2
Filing date	Nov 27, 2018
Priority date	Nov 27, 2018
Publication date	Jan 14, 2025
Grant date	Jan 14, 2025

Abstract

Method, apparatus and computer program product for multi-modal user authorization are described herein. For example, the apparatus includes at least one processor and at least one non-transitory memory including program code. The at least one non-transitory memory and the program code are configured to, with the at least one processor, receive a request to enable a first client device associated with a first user profile to access a group-based communication system; determine a first access privilege status for the first user profile; in response to determining that the first access privilege status is a general access privilege status, transmit, to the first client device, first user interface data associated with a general access user interface; and in response to determining that the first access privilege status is a limited access privilege status, transmit, to the first client device, second user interface data associated with a limited access user interface.

First claim

That which is claimed:

1. A computer-implemented method for user authorization in a group-based communication system, the computer-implemented method comprising:
receiving a first access request to enable a first client device associated with a first user profile to access the group-based communication system;
identifying a user identifier associated with the first user profile based on the first access request;
retrieving an access privilege identifier by querying a user authorization database based on the user identifier, the access privilege identifier being initially established in the user authorization database by a user of an administrator profile of the group-based communication system;
determining, based on the access privilege identifier associated with the first access request, a first access privilege status associated with the first user profile, that the first user profile is associated with a general access privilege status or a limited access privilege status;
in response to determining that the first user profile is associated with the general access privilege status, transmitting, to the first client device associated with the first user profile, first user interface data associated with a general access user interface for display by the first client device, wherein the general access user interface enables the first client device to access one or more group-based communication interfaces of the group-based communication system, and wherein the general access user interface displays one or more first communications associated with the one or more group-based communication interfaces via a first display layout; and
in response to determining that the first user profile is associated with the limited access privilege status, transmitting, to the first client device, second user interface data associated with a limited access user interface for display by the first client device, wherein the limited access user interface enables the first client device to access a messaging communication interface associated with the group-based communication system, and wherein the limited access user interface displays one or more second communications associated with the messaging communication interface via a second display layout.

2. The computer-implemented method of claim 1 , wherein the limited access user interface is further configured to enable the first client device to obtain limited access to the one or more group-based communication interfaces.

3. The computer-implemented method of claim 1 , wherein the limited access user interface is further configured to disable the first client device from obtaining access to the one or more group-based communication interfaces.

4. The computer-implemented method of claim 1 , wherein the limited access user interface is further configured to enable the first client device to obtain access to a broadcast communication interface associated with the group-based communication system.

5. The computer-implemented method of claim 1 , wherein the first access request includes the access privilege identifier.

6. The computer-implemented method of claim 1 , further comprising:
receiving a modification command, the modification command comprising instructions to modify an access privilege status associated with the first user profile; and
modifying the access privilege status based on the modification command.

7. The computer-implemented method of claim 6 , wherein the modification command is received from a second client device, the second client device associated with the administrator profile for the group-based communication system.

8. The computer-implemented method of claim 6 , wherein the modification command is generated in response to a first modification request received from the first client device associated with the first user profile.

9. The computer-implemented method of claim 6 , wherein the modification command is generated in response to a second modification request received from a second computing device associated with a second user profile authorized to access at least one group-based communication interface of the group-based communication system.

10. An apparatus comprising at least one processor and at least one non-transitory memory comprising program code, wherein the at least one non-transitory memory and the program code are configured to, with the at least one processor, cause the apparatus to at least perform an operation comprising:
receiving a first access request to enable a client device associated with a user profile to access a group-based communication system;
identifying a user identifier associated with the user profile based on the first access request;
retrieving an access privilege identifier by querying a user authorization database based on the user identifier, the access privilege identifier being initially established in the user authorization database by a user of an administrator profile of the group-based communication system;
determining, based on the access privilege identifier associated with the first access request, that the user profile is associated with a general access privilege status or a limited access privilege status;
in response to determining that the user profile is associated with the general access privilege status, transmitting, to the client device associated with the user profile, first user interface data associated with a general access user interface for display by the client device, wherein the general access user interface enables the client device to access one or more group-based communication interfaces of the group-based communication system, and wherein the general access user interface displays one or more first communications associated with the one or more group-based communication interfaces via a first display layout; and
in response to determining that the user profile is associated with the limited access privilege status, transmitting, to the client device, second user interface data associated with a limited access user interface for display by the client device, wherein the limited access user interface enables the client device to access a messaging communication interface associated with the group-based communication system, and wherein the limited access user interface displays one or more second communications associated with the messaging communication interface via a second display layout.

11. The apparatus of claim 10 , wherein the limited access user interface is further configured to enable the client device to obtain limited access to the one or more group-based communication interfaces.

12. The apparatus of claim 10 , wherein the limited access user interface is further configured to disable the client device from obtaining access to the one or more group-based communication interfaces.

13. The apparatus of claim 10 , wherein the limited access user interface is further configured to enable the client device to obtain access to a broadcast communication interface associated with the group-based communication system.

14. The apparatus of claim 10 , wherein the first access request includes the access privilege identifier.

15. The apparatus of claim 10 , the method further comprising:
receiving a modification command, the modification command comprising instructions to modify an access privilege status associated with the user profile; and
modifying the access privilege status based on the modification command.

16. A non-transitory computer storage medium comprising instructions configured to cause one or more processors to at least perform operations co

Assignees

• Salesforce Inc

Inventors

• Jones Leah
• Frank Ilan
• Nguyen Rosaleen
• Marshall Kevin

Classifications

• H04L63/102

  Entity profiles · CPC title

• H04L12/18

  for broadcast or conference {, e.g. multicast} · CPC title

• H04L12/185

  with management of multicast group membership · CPC title

• H04L63/101 Primary

  Access control lists [ACL] · CPC title

• H04L63/104 Primary

  Grouping of entities · CPC title