PLM系统中工作流访问控制模型研究

为了满足产品生命周期管理(PLM)系统对工作流访问控制的需求,提出了一种基于生命周期状态、工作流节点和角色的工作流访问控制模型。该模型实现了一种基于组织的角色动态分配机制,满足了PLM系统中多项目团队并行开发的要求,提高了工作流系统权限控制的灵活性和安全性。通过建立数据项在工作流中的工作空间模型,以及生命周期授权模型和工作流节点授权模型,实现了PLM系统中生命周期管理争工作流管理的共同授权与访问控制,并且支持多种不同的权限解析规则。给出了该模型在某大型通讯设备制造企业PLM系统中的应用实例,验证了模型的正确性和高效性。

Research on Access Control Model for Workflow Management in the PLM System

To meet the access control requirements of workflow system in product lifecycle man- agement(PLM)system,this paper proposed an access control model based on lifecycle status of the product data,nodes of the workflow,and roles of the accessing user.This model provides an organi- zation-based roles assigned model to support the concurrent design process among a large number of work teams in the PLM system and improve the flexibility and security of the access control in the workflow management.Through establishing the work space model of the data item in the workflow, the lifecycle-status based authorization model and the workflow-nodes based authorization model, the paper realized the co-authorization and access control of lifecycle management and workflow man- agement in the PLM system and also supported different permission parsing rules.This model is im- plemented in a PLM project of a telecom equipment manufacturing company,as an example to testify the correctness and effectiveness of the model.