Automatic operation detection on protected field
Systems and methods are provided for automatic operation detection on protected fields. A data model configuration can be used to specify which attributes of a data model used by a cloud-based application are protected by a data security provider monitoring communications between the application and a client device. A determination can be made automatically which operations of the cloud-based application are supported for protected fields. The cloud-based application can be configured to enable/disable certain features, such as validators, auto complete, search operators, etc. according to whether the attributes are protected fields.
1. A method comprising:
providing, by a cloud infrastructure system, an application programming interface (API) to a data model used by a cloud-based application of the cloud infrastructure system;
receiving, by the cloud infrastructure system, a data model configuration through the API, wherein the data model configuration indicates one or more protected attributes of an entity modeled using the data model, and the data model configuration is generated by a data security provider monitoring communications between the cloud-based application and a client device;
determining, by the cloud infrastructure system, one or more protected fields using the data model configuration;
determining, by the cloud infrastructure system, one or more operations that can be performed by the cloud-based application using the one or more protected fields, wherein the determining comprises examining operators on the one or more protected fields, and identifying the one or more operations that can be performed against the one or more protected fields without the one or more operations becoming invalid based on the examining of the operators; and
configuring, by the cloud infrastructure system, the cloud-based application to have the one or more operations enabled based on the determination of the one or more operations that can be performed using the one or more protected fields.
2. The method of claim 1 , wherein receiving the data model configuration comprises receiving the one or more protected attributes from the data security provider.
3. The method of claim 1 , wherein determining the one or more protected fields using the data model configuration comprises determining which attributes of the data model have been designated as protected fields.
4. The method of claim 1 , wherein determining the one or more operations that can be performed using the one or more protected fields comprises determine supported actions.
5. The method of claim 1 , wherein determining the one or more operations that can be performed using the one or more protected fields comprises determine unsupported actions.
6. The method of claim 1 , wherein configuring the cloud-based application based on the one or more operations that can be performed using the one or more protected fields comprises enabling a feature.
7. The method of claim 1 , wherein configuring the cloud-based application based on the one or more operations that can be performed using the one or more protected fields comprises disabling a feature.
8. A non-transitory machine readable storage medium having instructions stored thereon that when executed by one or more processors cause the one or more processors to perform a method comprising:
providing an application programming interface (API) to a data model used by a cloud-based application of a cloud infrastructure system;
receiving a data model configuration through the API, wherein the data model configuration indicates one or more protected attributes of an entity modeled using the data model, and the data model configuration is generated by a data security provider monitoring communications between the cloud-based application and a client device;
determining one or more protected fields using the data model configuration;
determining one or more operations that can be performed by the cloud-based application using the one or more protected fields, wherein the determining comprises examining operators on the one or more protected fields, and identifying the one or more operations that can be performed against the one or more protected fields without the one or more operations becoming invalid based on the examining of the operators; and
configuring the cloud-based application to have the one or more operations enabled based on the determination of the one or more operations that can be performed using the one or more protected fields.
9. The non-transitory machine readable storage medium of claim 8 , wherein receiving the data model configuration comprises receiving the one or more protected attributes from the data security provider.
10. The non-transitory machine readable storage medium of claim 8 , wherein determining the one or more protected fields using the data model configuration comprises determining which attributes of the data model have been designated as protected fields.
11. The non-transitory machine readable storage medium of claim 8 , wherein determining the one or more operations that can be performed using the one or more protected fields comprises determine supported actions.
12. The non-transitory machine readable storage medium of claim 8 , wherein determining the one or more operations that can be performed using the one or more protected fields comprises determine unsupported actions.
13. The non-transitory machine readable storage medium of claim 8 , wherein configuring the cloud-based application based on the one or more operations that can be performed using the one or more protected fields comprises enabling a feature.
14. A system comprising:
a processor; and
a memory storing a set of instructions which when executed by the processor cause the processor to:
provide an application programming interface (API) to a data model used by a cloud-based application of a cloud infrastructure system
receive a data model configuration through the API, wherein the data model configuration indicates one or more protected attributes of an entity modeled using the data model, and the data model configuration is generated by a data security provider monitoring communications between the cloud-based application and a client device;
determine one or more protected fields using the data model configuration;
determine one or more operations that can be performed by the cloud-based application using the one or more protected fields, wherein the determining comprises examining operators on the one or more protected fields, and identifying the one or more operations that can be performed against the one or more protected fields without the one or more operations becoming invalid based on the examining of the operators; and
configure the cloud-based application to have the one or more operations enabled based on the determination of the one or more operations that can be performed using the one or more protected fields.
15. The system of claim 14 , wherein receiving the data model configuration comprises receiving the one or more protected attributes from the data security provider.
16. The system of claim 14 , wherein determining the one or more protected fields using the data model configuration comprises determining which attributes of the data model have been designated as protected fields.
17. The system of claim 14 , wherein determining the one or more operations that can be performed using the one or more protected fields comprises determine supported actions.
18. The system of claim 14 , wherein determining the one or more operations that can be performed using the one or more protected fields comprises determine unsupported actions.
19. The system of claim 14 , wherein configuring the cloud-based application based on the one or more operations that can be performed using the one or more protected fields comprises enabling a feature.
20. The system of claim 19 , wherein configuring the cloud-based application based on the one or more operations that can be performed using the one or more protected fields comprises disabling a feature.