一种基于表达式的工作流授权模型

提出了一种动态的工作流授权模型,通过表达式描述任务的触发机制和约束。与基于角色的其它模型不同,在此模型中角色仅是用户的属性之一,通过给用户定义更多的属性和基于这些属性的函数可以很容易地扩展模型。通过表达式可以描述用户和角色的权限、任务状态转换约束、任务实例数量约束、任务间的依赖关系、职责分离、时间约束、组织机构约束。约束表达式的灵活性给模型带来强大的功能和适应性。这个模型支持含有多起点、多终点、单选、多选、与聚合、或聚合、多聚合和循环的复杂工作流。

An Expression-based Workflow Authorization Model

A dynamic workflow authorization model is proposed,which describes the triggers and constraints of tasks by expression.Unlike other role-based models,the role set in this model is only one property of a user.It's simple to extend the model by design more properties of users and functions.The model describes permissions of users and roles,constraints of task state transitions,count of task instances,dependencies of tasks,separation of duties,time and organization via expression.The flexible of expression brings the model capability and adaptability.This model supports complex workflows include multi startup task,multi end task,and-split,or-split,multiple-split,and-join,or-join,multiple-join and loop.