An organization and task based access control model for workflow system

Abstract

The application of traditional Role-Based Access Control in workflow system can reduce the complexity of privilege management. However, merely using role concept can hardly reflect enterprise' organization structure and can not specify organization unit for task; moreover, permission inheritance relation among roles isn't consistent with the fact of workflow system. This paper proposed an organization and task based access control model to amend the above shortcomings. Combined with the proposed model, through adding users' blacklist to each task, a dynamic access control algorithm is given. In practice, the model OTBAC with the access control algorithm is flexible and feasible. © Springer-Verlag Berlin Heidelberg 2007.