Multitenant Extension Classification for Tenant Isolation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Multitenant database environments face challenges in deploying application extensions from non-multitenant environments, particularly in segregating access and liability, and managing legacy code, which can lead to security and maintenance issues.
Innovation Solution
A classification assistant is used to examine properties of objects in an extension package, determining whether they should be deployed to a shared container or a tenant-specific container, with generated objects being either non-modifiable or user-modifiable, and access restricted to prevent data integrity issues.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If application extensions are deployed in a multitenant environment without classification, then deployment simplicity is maintained, but security and data integrity are compromised
Solution Approach 1:
The patent segments extension objects into two distinct categories: shareable objects deployed to the shared container and tenant-specific objects deployed to tenant containers. This segmentation is achieved through a classification mechanism that analyzes object properties and metadata, automatically determining the appropriate deployment target. By dividing the deployment process into these two pathways, the system ensures that sensitive tenant-specific code is isolated while maintaining the simplicity of automated deployment.
Solution Approach 2:
The patent introduces a classification assistant as an intermediary component between the extension package and the deployment targets. This intermediary analyzes object metadata, determines shareability, and routes objects to appropriate containers. The classification assistant acts as a mediator that resolves the complexity of deployment decisions while maintaining automated operation, preventing direct deployment of unclassified objects that could compromise security.
2Reliability
If all extension objects are deployed to the shared container, then resource sharing is maximized, but tenant isolation and security are compromised
Solution Approach 1:
The patent applies local quality by deploying different types of extension objects to different locations: shareable objects are deployed to the shared container where they can be utilized by multiple tenants, while tenant-specific objects are deployed to individual tenant containers. This localized deployment strategy ensures that each object is placed in the most appropriate environment based on its shareability characteristics, maximizing resource utilization for shareable objects while maintaining tenant isolation for private objects.
3Adaptability or versatility
If generated objects are made user-modifiable, then tenant customization is enabled, but system stability and security are compromised
Solution Approach 1:
The patent implements dynamics by making generated objects deployed to tenant containers modifiable by tenants, while keeping core objects in the shared container immutable. This dynamic approach allows tenants to customize their specific objects without affecting the stability of the core system. The modifiability is conditional based on the object's deployment location and type, enabling customization where safe while maintaining system stability where required.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
Techniques and solutions are described for facilitating the installation of software application extensions in a multi-tenant environment. A package for an extension may include code for a plurality of objects of the extension. Extension objects can be generated or non-generated. Generated objects can be user modifiable or not user modifiable. A software-implemented classification assistant can examine properties of the objects and classify them for deployment to a shared container or prompt a user to select whether an object should be deployed to the shared container or to a tenant-specific container. Properties of objects in the shared container may be set by the classification assistant such they are not modifiable by tenants.