View source for 18515659. SMART PRIVILEGE ESCALATION IN A CLOUD PLATFORM simplified abstract (Salesforce, Inc.)

=SMART PRIVILEGE ESCALATION IN A CLOUD PLATFORM=


==Organization Name==

[[:Category:Salesforce, Inc.|Salesforce, Inc.]]


[[Category:Salesforce, Inc.]]

==Inventor(s)==

[[:Category:Manish Singh of San Francisco CA (US)|Manish Singh of San Francisco CA (US)]][[Category:Manish Singh of San Francisco CA (US)]]

==SMART PRIVILEGE ESCALATION IN A CLOUD PLATFORM - A simplified explanation of the abstract==


This abstract first appeared for US patent application 18515659 titled 'SMART PRIVILEGE ESCALATION IN A CLOUD PLATFORM

==Simplified Explanation==

The abstract of the patent application describes a method for privilege escalation in a cloud platform, where access privileges to database entities are escalated based on a base escalation matrix.

* Provisioning access privileges to database entities covered by a license
* Providing additional access privileges not covered by the license through a base escalation matrix
* Detecting failure of a requested CRUD operation due to lack of required access privileges
* Triggering escalation of access privileges by fetching the base escalation matrix
* Applying additional access privileges to the current API query request
* Repeating the requested CRUD operation with escalated access privileges
* Removing escalated access privileges after the operation is completed

== Potential Applications ==
The technology described in the patent application could be applied in cloud platforms, database management systems, and access control systems.

== Problems Solved ==
This technology solves the problem of efficiently managing access privileges in a cloud platform, ensuring that clients have the necessary permissions to perform CRUD operations on database entities.

== Benefits ==
The benefits of this technology include improved security, streamlined access control management, and enhanced scalability for cloud platforms.

== Potential Commercial Applications ==
The technology could be commercially applied in cloud service providers, database security companies, and enterprise software solutions.

== Possible Prior Art ==
One possible prior art for this technology could be role-based access control systems in database management.

=== Unanswered Questions ===

=== How does this technology handle conflicts between different levels of access privileges in the base escalation matrix? ===
The technology does not address how conflicts between different levels of access privileges are resolved when applying the base escalation matrix.

=== What measures are in place to prevent unauthorized access to the base escalation matrix itself? ===
The technology does not specify any security measures to prevent unauthorized access to the base escalation matrix.


==Original Abstract Submitted==

Privilege escalation in a cloud platform comprises provisioning to a client access privileges to the database entities that are covered by a license. A base escalation matrix is provisioned to the client with additional access privileges not covered by the license. An API request is received and the requested CRUD operation is attempted on a first database entity. Responsive to the requested CRUD operation initially failing because the client does not have required access privileges activation of an exception signaling failure of the requested CRUD operation is detected and used as a trigger to fetch the base escalation matrix. The access privileges of the client are escalated by applying the additional access privileges from the base escalation matrix to a user context of the current API query request, and repeating the requested CRUD operation. The escalated access privileges are then removed.



[[Category:G06F16/16]]
[[Category:G06F16/2455]]
[[Category:G06F21/62]]