Hierarchical permissions model within a document
Case management systems and techniques are disclosed. In various embodiments, a hierarchical document permission model is received, the model describing a document hierarchy comprising a plurality of hierarchically related document nodes and defining for each of at least a subset of said document nodes one or more document roles and for each such role one or more document permissions with respect to that document node. The hierarchical document permission model is used to determine and enforce permissions with respect to case management instances to which the hierarchical document permission model applies.
1. A method of managing permissions, comprising:
receiving at a processor a hierarchical document permission model, the hierarchical document permission model describing a document hierarchy comprising a plurality of document nodes that are hierarchically related, defining for each of at least a subset of said plurality of document nodes one or more document roles, and defining for each such document role of the one or more document roles one or more document permissions with respect to that document node, wherein the hierarchical document permission model associates the one or more document permissions with respect to that document node with a condition comprising a specified state; and
using by the processor the hierarchical document permission model to determine and enforce permissions with respect to case management instances to which the hierarchical document permission model applies, wherein using the hierarchical document permission model includes adjusting the one or more document permissions associated with respect to that document node in response to a change associated with the specified state of that document node of the plurality of hierarchically related document nodes, wherein using the hierarchical document permission model to determine and enforce permissions with respect to case management instances to which the hierarchical document permission model applies comprises:
receiving a request to perform an action with respect to a document associated with a case management instance, wherein the document is associated with the hierarchical document permission model and the request affects a portion of the document associated with an affected document node of the document hierarchy;
determining that a requesting user associated with the request is assigned an assigned document role with respect to the case management instance;
determining that the assigned document role is granted in the hierarchical document permission model, with respect to the affected document node, a permission required to perform the action with respect to the document node; and
allowing the action to be performed based at least in part on the determination that the requesting user is associated with the assigned document role and the determination that the assigned document role is granted in the hierarchical document permission model the permission required to perform the action with respect to the document node.
2. The method of claim 1 , wherein the hierarchical document permission model is included in a case model definition with which said case management instances are associated.
3. The method of claim 2 , wherein said document roles comprise case roles defined in said case model definition.
4. The method of claim 2 , wherein the hierarchical document permission model is associated with a case leaf node of a case model described in said case model definition.
5. The method of claim 1 , wherein the hierarchical document permission model associates the condition with extending the permission to users assigned to the document role with respect to the document node.
6. The method of claim 5 , wherein the condition comprises the specified state of a state machine associated with the document node.
7. The method of claim 5 , wherein the condition comprises the specified state of a state machine associated with a case node with which the document is associated.
8. The method of claim 5 , wherein the condition comprises a context data.
9. The method of claim 5 , further comprising determining that the condition is satisfied and extending the permission to the user based at least in part on the determination that the condition is satisfied.
10. The method of claim 1 , wherein a permission defined in the hierarchical document permission model is enforced with respect to a document node with respect to the permission is granted and any child or other descendant nodes that are below that document node in the document hierarchy.
11. A case management system, comprising:
a storage device configured to store a hierarchical document permission model, the hierarchical document permission model describing a document hierarchy comprising a plurality of document nodes that are hierarchically related, defining for each of at least a subset of said plurality of document nodes one or more document roles, and defining for each such document role of the one or more document roles one or more document permissions with respect to that document node, wherein the hierarchical document permission model associates the one or more document permissions with respect to that document node with a condition comprising a specified state; and
a processor coupled to the storage device and configured to use the hierarchical document permission model to determine and enforce permissions with respect to case management instances to which the hierarchical document permission model applies, wherein using the hierarchical document permission model includes adjusting the one or more document permissions associated with respect to that document node in response to a change associated with the specified state of that document node of the plurality of hierarchically related document nodes, wherein to use the hierarchical document permission model to determine and enforce permissions with respect to case management instances to which the hierarchical document permission model applies comprises:
receiving a request to perform an action with respect to a document associated with a case management instance, wherein the document is associated with the hierarchical document permission model and the request affects a portion of the document associated with an affected document node of the document hierarchy;
determining that a requesting user associated with the request is assigned an assigned document role with respect to the case management instance;
determining that the assigned document role is granted in the hierarchical document permission model, with respect to the affected document node, a permission required to perform the action with respect to the document node; and
allowing the action to be performed based at least in part on the determination that the requesting user is associated with the assigned document role and the determination that the assigned document role is granted in the hierarchical document permission model the permission required to perform the action with respect to the document node.
12. The system of claim 11 , wherein the hierarchical document permission model is included in a case model definition with which said case management instances are associated.
13. The system of claim 12 , wherein said document roles comprise case roles defined in said case model definition.
14. The system of claim 12 , wherein the hierarchical document permission model is associated with a case leaf node of a case model described in said case model definition.
15. The system of claim 11 , wherein the hierarchical document permission model associates the condition with extending the permission to users assigned to the document role with respect to the document node.
16. A computer program product to manage a case, the computer program product being embodied in a non-transitory computer readable storage medium and comprising computer instructions for:
receiving a hierarchical document permission model, the hierarchical document permission model describing a document hierarchy comprising a plurality of document nodes that are hierarchically related, defining for each of at least a subset of said plurality of document nodes one or more document roles, and defining for each such document role of the one or more document roles one or more document permissions with respect to that document node, wherein the hierarchical document permission model associates the one or more document permissions with respect to that document node with a condition comprising a specified state; and
using the hierarchical document permission model to determine and enforce permissions with respect to case management instances to which the hierarchical document permission model applies, wherein using the hierarchical document permission model includes adjusting the one or more document permissions associated with respect to that document node in response to a change associated with the specified state of that document node of the plurality of hierarchically related document nodes, wherein using the hierarchical document permission model to determine and enforce permissions with respect to case management instances to which the hierarchical document permission model applies comprises:
receiving a request to perform an action with respect to a document associated with a case management instance, wherein the document is associated with the hierarchical document permission model and the request affects a portion of the document associated with an affected document node of the document hierarchy;
determining that a requesting user associated with the request is assigned an assigned document role with respect to the case management instance;
determining that the assigned document role is granted in the hierarchical document permission model, with respect to the affected document node, a permission required to perform the action with respect to the document node; and
allowing the action to be performed based at least in part on the determination that the requesting user is associated with the assigned document role and the determination that the assigned document role is granted in the hierarchical document permission model the permission required to perform the action with respect to the document node.
17. The computer program product of claim 16 , wherein the hierarchical document permission model is included in a case model definition with which said case management instances are associated.