Proposal system access policy enforcement
Described herein are techniques and mechanisms for access policy creation and enforcement. According to various embodiments, a message may be received via a communications interface. The message may include a request to perform an action within a proposal system. The proposal system may be operable to create a request for proposals based on user input. The request for proposals may describe a business need associated with a business entity. The proposal system may be further operable to process a plurality of proposal documents received in response to the request for proposals. The request may be associated with a user account. A determination may be made as to whether the requested action complies with an access policy. The requested action may be performed when it is determined that the requested action complies with the access policy.
1. A method comprising:
receiving a message via a communications interface in a computing device, the message including a request to perform an action within a proposal system, the proposal system being operable to create a request for proposals based on user input, the request for proposals describing a business need associated with a business entity, the proposal system being further operable to process a plurality of proposal documents received in response to the request for proposals, the request being associated with a user account, wherein the plurality of proposal documents correspond to plans addressing the business need associated with the business entity;
determining, via a processor in the computing device, whether the requested action complies with an access policy, wherein the requested action comprises a request to create a designated proposal document in response to the request for proposals; and
performing the requested action via the processor when it is determined that the requested action complies with the access policy, wherein performing the requested action comprises creating the designated proposal document based on user input and suggested content, the suggested content being determined by the proposal system,
wherein the user account is a member of a first user account group, wherein the access policy identifies a first one or more permitted actions associated with the first user account group, and wherein determining whether the requested action complies with the access policy comprises determining whether the first one or more permitted actions includes the requested action,
wherein the user account is a member of a second user account group, and wherein the access policy identifies a second one or more permitted actions associated with the second user account group, wherein determining whether the requested action complies with the access policy further comprises determining whether the second one or more permitted actions includes the requested action, and wherein the requested action is performed when either the first or second one or more permitted actions includes the requested action.
2. The method recited in claim 1 , wherein the user account is associated with a first organizational role, wherein the access policy identifies one or more permitted actions for the first organizational role, and wherein determining whether the requested action complies with the access policy comprises determining whether the one or more permitted actions includes the requested action.
3. The method recited in claim 1 ,
wherein the requested action is an action selected from the group consisting of: publishing a proposal document, evaluating a proposal document, and transmitting a proposal document to a designated recipient.
4. The method recited in claim 1 , the method further comprising:
identifying a designated organizational entity associated with the user account, wherein the proposal system is operable to provide proposal management services to a plurality of organizational entities including the designated organizational entity; and
retrieving the access policy, the access policy being associated with the designated organizational entity.
5. The method recited in claim 1 ,
wherein the request for an action is generated automatically.
6. The method recited in claim 1 ,
wherein at least one of the first one or more permitted actions associated with the first user account group is different from each of the one or more permitted actions associated with the second user account group.
7. The method recited in claim 1 ,
wherein the user account is associated with a first organizational role, wherein the access policy identifies one or more permitted actions for the first organizational role, and wherein determining whether the requested action complies with the access policy comprises determining whether the one or more permitted actions includes the requested action.
8. The method recited in claim 7 ,
wherein the first organizational role is associated with relationship information, wherein the relationship information designates a relationship between the first organizational role and a second organizational role, and wherein a designated one of the one or more permitted actions is inherited from access policy information associated with the second organizational role.
9. A computing system comprising:
a communications interface operable to receive a message, the message including a request to perform an action within a proposal system implemented in the computing system, the proposal system being operable to create a request for proposals based on user input, the request for proposals describing a business need associated with a business entity, the proposal system being further operable to process a plurality of proposal documents received in response to the request for proposals, the request being associated with a user account, wherein the plurality of proposal documents correspond to plans addressing the business need associated with the business entity;
memory operable to store the received message; and
a processor operable to:
determine whether the requested action complies with an access policy, wherein the requested action comprises a request to create a designated proposal document in response to the request for proposals, and
perform the requested action when it is determined that the requested action complies with the access policy, wherein performing the requested action comprises creating the designated proposal document based on user input and suggested content, the suggested content being determined by the proposal system,
wherein the user account is a member of a first user account group, wherein the access policy identifies a first one or more permitted actions associated with the first user account group, and wherein determining whether the requested action complies with the access policy comprises determining whether the first one or more permitted actions includes the requested action,
wherein the user account is a member of a second user account group, and wherein the access policy identifies a second one or more permitted actions associated with the second user account group, wherein determining whether the requested action complies with the access policy further comprises determining whether the second one or more permitted actions includes the requested action, and wherein the requested action is performed when either the first or second one or more permitted actions includes the requested action.
10. The system recited in claim 9 , wherein creating the designated proposal document comprises processing the user input and suggested content to arrange the proposal document on a single page.
11. The system recited in claim 9 ,
wherein the requested action is an action selected from the group consisting of: publishing a proposal document, evaluating a proposal document, and transmitting a proposal document to a designated recipient.
12. The system recited in claim 9 ,
identifying a designated organizational entity associated with the user account, wherein the proposal system is operable to provide proposal management services to a plurality of organizational entities including the designated organizational entity; and
retrieving the access policy, the access policy being associated with the designated organizational entity.
13. The system recited in claim 9 ,
wherein the request for an action is generated automatically.
14. The system recited in claim 9 ,
wherein the user account is associated with a first organizational role, wherein the access policy identifies one or more permitted actions for the first organizational role, and wherein determining whether the requested action complies with the access policy comprises determining whether the one or more permitted actions includes the requested action.
15. One or more non-transitory computer readable media having instructions stored thereon for performing a method, the method comprising:
receiving a message via a communications interface, the message including a request to perform an action within a proposal system, the proposal system being operable to create a request for proposals based on user input, the request for proposals describing a business need associated with a business entity, the proposal system being further operable to process a plurality of proposal documents received in response to the request for proposals, the request being associated with a user account, wherein the plurality of proposal documents correspond to plans addressing the business need associated with the business entity;
determining, via a processor, whether the requested action complies with an access policy, wherein the requested action comprises a request to create a designated proposal document in response to the request for proposals; and
performing the requested action when it is determined that the requested action complies with the access policy, wherein performing the requested action comprises creating the designated proposal document based on user input and suggested content, the suggested content being determined by the proposal system,
wherein the user account is a member of a first user account group, wherein the access policy identifies a first one or more permitted actions associated with the first user account group, and wherein determining whether the requested action complies with the access policy comprises determining whether the first one or more permitted actions includes the requested action,
wherein the user account is a member of a second user account group, and wherein the access policy identifies a second one or more permitted actions associated with the second user account group, wherein determining whether the requested action complies with the access policy further comprises determining whether the second one or more permitted actions includes the requested action, and wherein the requested action is performed when either the first or second one or more permitted actions includes the requested action.
16. The one or more computer readable media recited in claim 15 , wherein creating the designated proposal document comprises processing the user input and suggested content to arrange the proposal document on a single page.
17. The one or more computer readable media recited in claim 15 ,
wherein the requested action is an action selected from the group consisting of: publishing a proposal document, evaluating a proposal document, and transmitting a proposal document to a designated recipient.