基于Web的工作流细粒度授权框架

A Web-Based Workflow Authorization Architecture with Fine Granularity

基于Web环境下的工作流系统面临复杂的数据安全管理难题。Web环境下的授权资源种类繁多、差异性大,需要控制模型具有较细的授权粒度,以保证工作流系统管理的安全性和灵活性。文中分析传统授权模型,结合Web系统基于表单的特点,提出一种由表单模型、授权模型、流程模型构成的工作流细粒度授权框架。并对该方案进行描述,给予实现。

One of the most challenging problems in large distributed worlkflow management system is the complexity of security administration. The complex kinds of resources in the Web requires the fine granularity authorization to guarantee the security and agility of workflow management system. This paper compares merits of the general authorization models in the Web- based workflow environment, combines the characteristic that Web is based on form,gives a new Web-based workflow authorization architecture with fine granularity which is assemabled by form model, authorization model and flow model, and presents an instance of the system at last.