US 12,437,094 B2
Access controls for external data records
Alexander Warshavsky, Walnut Creek, CA (US); Cloves Carneiro Junior, Hollywood, FL (US); Adam Torman, Walnut Creek, CA (US); Brian Esserlieu, Westminster, CO (US); Carl Montgomery, Salt Lake City, UT (US); and Douglas Bitting, Pleasanton, CA (US)
Assigned to Salesforce, Inc., San Francisco, CA (US)
Filed by salesforce.com, inc., San Francisco, CA (US)
Filed on Jan. 13, 2022, as Appl. No. 17/575,436.
Claims priority of provisional application 63/261,312, filed on Sep. 17, 2021.
Prior Publication US 2023/0092849 A1, Mar. 23, 2023
Int. Cl. G06F 21/62 (2013.01)
CPC G06F 21/6218 (2013.01) 20 Claims
OG exemplary drawing
 
1. A computer-implemented method comprising:
receiving, by a first computer system, user input from a computing device of a first user, the user input indicating that a second user has permission to access a proxy entity maintained by the first computer system, wherein the proxy entity represents an external data entity maintained by a second computer system, wherein the external data entity is stored in a database accessible to the second computer system but inaccessible to the first computer system;
assigning, by the first computer system, a permission set to the second user based on the user input;
determining, by the first computer system and using the permission set, an access permission relative to the external data entity, wherein the determining of the access permission relative to the external data entity comprises looking up a first stored mapping in response to a request for information about permissions assigned to the second user, the first stored mapping linking an identifier of the proxy entity to an identifier of the external data entity, the first stored mapping being one of a plurality of stored mappings periodically updated in response to synchronization of the first and second computer systems to link identifiers of proxy entities to corresponding identifiers of external data entities; and
communicating, by the first computer system, the access permission relative to the external data entity to the second computer system, wherein the access permission relative to the external data entity is processed by the second computer system to generate an authorization token controlling access to the external data entity by a computing device of the second user, the authorization token configurable to have:
a first state indicating permission to access the external data entity, and
a second state not indicating permission to access the external data entity in response to detecting that the external data entity has been deleted without updating or deleting the first stored mapping.