Method, SOA registry and SOA repository for granting a user secure access to resources of a process

1. A method for granting a user secure access to one or more resources accessed by a process, the process being defined in a Service-Oriented Architecture (SOA) registry and comprising one or more process-steps, each process-step accessing one or more resources stored in an SOA repository, the method comprising:

a. during an execution of the process, for each resource accessed by at least one of the process-steps, creating an entry in the SOA registry determining the accessed resource;

b. creating a process-instance associated with a respective process-step-instance in the SOA registry, the process-step-instance representing a respective process-step, and creating a process-instance-role in the SOA registry;

c. creating, for each resource accessed by at least one of the process-steps corresponding to the respective process-step-instance, an access privilege in the SOA repository that grants access to the respective resource for the process-instance-role; and

d. assigning the process-instance-role to the user.

2. The method of claim 1 , wherein b. and c. are also performed during the execution of the process.

3. The method of claim 1 , further comprising:

creating a process-instance in the SOA registry representing the execution of the respective process;

for each process-step executed by the process, creating a process-step-instance in the SOA registry representing the respective process-step and creating a relationship to the respective process-instance;

wherein the entries created in a. are added to the respective process-step-instance.

4. The method of claim 1 , wherein the entries created in a. determine a type of access to the respective resource, wherein the type is at least one of the group comprising: create, update and/or delete.

5. The method of claim 1 , further comprising:

creating a process-role in the SOA registry;

adding the process-instance-roles to the process-role; and

assigning the process-role to the user.

6. The method of claim 1 , wherein each of the one or more access privileges is at least one of the group comprising: a read privilege, an update privilege and/or a delete privilege.

7. The method of claim 1 ,

wherein the one or more resources comprise a plurality of resource-versions and during the execution of the process, each process-step accesses a specific resource-version;

wherein the entries created in a. determine the respective resource-version; and

wherein the access privileges created in c. grant access to the respective resource-version.

8. The method of claim 1 , further comprising automatically and/or manually editing the access privileges.

9. The method of claim 1 , wherein the access privileges are WebDAV ACLs.

10. The method of claim 9 , wherein c. comprises creating an entry in an Access Control List (ACL) of the respective resource.

11. The method of claim 10 , wherein the ACL allows read access to the respective resource for the process-instance-role.

12. A system at least one processor and an SOA repository for granting a user secure access to one or more resources accessed by a process, the SOA repository being configured for use in a method according to claim 1 .

13. A system having at least one processor and an SOA environment comprising the system having the SOA repository of claim 12 .

14. The method of claim 1 , wherein for each resource accessed by the at least one of the process-steps during the execution of the process, creating a read privilege in the SOA repository that grants read access to the respective resource for the process-instance-role, so that the process-instance-role is granted read access to the resources accessed by the corresponding execution of the process and is prevented from accessing other resources which do not relate to the corresponding execution of the process.

15. The method of claim 1 , wherein a user is granted access to revise one or more process-instances based on the process-role corresponding to the one or more process instances.

16. A system comprising at least one processor and an SOA registry executed using the processor, the SOA registry used for granting a user secure access to one or more resources accessed by a process, the SOA registry configured to:

a. during an execution of the process, for each resource accessed by at least one of the process-steps, create an entry in the SOA registry determining the accessed resource;

b. create a process-instance associated with a respective process-step-instance in the SOA registry, the process-step-instance representing a respective process-step, and create a process-instance-role in the SOA registry;

c. create, for each resource accessed by at least one of the process-steps corresponding to the respective process-step-instance, an access privilege in the SOA repository that grants access to the respective resource for the process-instance-role; and

d. assign the process-instance-role to the user.

17. A system having at least one processor and an SOA environment comprising the system having the SOA registry of claim 16 .

18. The system of claim 16 , wherein the SOA registry is further configured to:

create a process-instance in the SOA registry representing the execution of the respective process;

for each process-step executed by the process, create a process-step-instance in the SOA registry representing the respective process-step and create a relationship to the respective process-instance;

wherein the entries created in a. are added to the respective process-step-instance.

19. A non-transitory computer-readable storage medium storing a computer program which, when executed by an information processing apparatus having at least one processor, cause the apparatus to perform functionality comprising:

a. during an execution of the process, for each resource accessed by at least one of the process-steps, creating an entry in the SOA registry determining the accessed resource;

b. creating a process-instance associated with a respective process-step-instance in the SOA registry, the process-step-instance representing a respective process-step, and creating a process-instance-role in the SOA registry;

c. creating, for each resource accessed by at least one of the process-steps corresponding to the respective process-step-instance, an access privilege in the SOA repository that grants access to the respective resource for the process-instance-role; and

d. assigning the process-instance-role to the user.

20. The non-transitory computer-readable storage medium of claim 19 , wherein the apparatus is further caused to perform functionality comprising:

creating a process-instance in the SOA registry representing the execution of the respective process;

for each process-step executed by the process, creating a process-step-instance in the SOA registry representing the respective process-step and creating a relationship to the respective process-instance;

wherein the entries created in a. are added to the respective process-step-instance.