基于任务和角色的工作流权限控制研究与实现

结合国家电网ERP工作流项目的实际情况,分析了几种常见的访问控制模型在工作流权限控制中的不足,以及基于任务和角色的访问控制模型在实现权限动态管理方面的优势。并以项目模块工程付款流程为例,阐述了SAP客户化工作流的开发过程,以及基于任务和角色的访问控制在ERP工作流中的具体应用,最后介绍了本项目中工作流待办的展现方式。实践证明基于任务和角色的访问控制能够有效地实现权限的动态管理,较好地满足ERP工作流权限控制的需要。

Research and Implementation of Task and Role-Based Workflow Authorization Management

With the actual situation of the ERP workilow project in State Grid Corporation of China, the strengths and weaknesses of several common access control models, especially task and role-based one, applied to the workflow authorization management, are analyzed. For example the project payment process, this paper describes the development of the SAP customizable workflow, the application of the task and role-based access control model in ERP workflow and the visualization of the workilow respectively. A project example shows that the task and role-based access control model can meet the need of ERP workflow authorization management and efficiently implement the dynamic authorization.