Hierarchical permissions model within a document
Case management systems and techniques are disclosed. In various embodiments, a hierarchical document permission model is received, the model describing a document hierarchy comprising a plurality of hierarchically related document nodes and defining for each of at least a subset of said document nodes one or more document roles and for each such role one or more document permissions with respect to that document node. The hierarchical document permission model is used to determine and enforce permissions with respect to case management instances to which the hierarchical document permission model applies.
1. A method of managing permissions, comprising:
receiving at a processor a hierarchical document permission model, the hierarchical document permission model describing a document hierarchy of a document model comprising a plurality of document nodes that are hierarchically related, the hierarchical document permission model defining for each of at least a subset of said plurality of document nodes one or more document roles, and defining for each such document role of the one or more document roles one or more document permissions with respect to that document node, wherein the hierarchical document permission model associates the one or more document permissions with respect to that document node with a condition comprising a specified state of that document node; and
using by the processor the hierarchical document permission model to determine and enforce permissions with respect to document instances to which the hierarchical document permission model applies, wherein using the hierarchical document permission model comprises allowing an action to be performed with respect to a document associated with a case management instance based on an assigned document role of a requesting user and a permission required to perform the action and adjusting the one or more document permissions associated with respect to a first document node from the plurality of hierarchically related documents nodes in response to a change associated with the specified state of the first document node, wherein each of the plurality of document nodes corresponds to a different portion of each document instance to which the document model applies.
2. The method of claim 1 , wherein the hierarchical document permission model is included in a case model definition with which said case management instances are associated.
3. The method of claim 2 , wherein said document roles comprise case roles defined in said case model definition.
4. The method of claim 2 , wherein the hierarchical document permission model is associated with a case leaf node of a case model described in said case model definition.
5. The method of claim 1 , wherein the hierarchical document permission model associates the condition with extending the permission required to perform the action to users assigned to the assigned document role with respect to the first document node.
6. The method of claim 5 , wherein the condition comprises the specified state of a state machine associated with the first document node.
7. The method of claim 5 , wherein the condition comprises the specified state of a state machine associated with a case node with which the document instances are associated.
8. The method of claim 5 , wherein the condition comprises a context data.
9. The method of claim 5 , further comprising determining that the condition is satisfied and extending the permission required to perform the action to a user based at least in part on the determination that the condition is satisfied.
10. The method of claim 1 , wherein a permission defined in the hierarchical document permission model is enforced with respect to a document node with respect to which the permission is granted and any child or other descendant nodes that are below that document node in the document hierarchy.
11. A case management system, comprising:
a storage device configured to store a hierarchical document permission model, the hierarchical document permission model describing a document hierarchy of a document model comprising a plurality of document nodes that are hierarchically related, the hierarchical document permission model defining for each of at least a subset of said plurality of document nodes one or more document roles, and defining for each such document role of the one or more document roles one or more document permissions with respect to that document node, wherein the hierarchical document permission model associates the one or more document permissions with respect to that document node with a condition comprising a specified state of that document node; and
a processor coupled to the storage device and configured to use the hierarchical document permission model to determine and enforce permissions with respect to document instances to which the hierarchical document permission model applies, wherein using the hierarchical document permission model comprises allowing an action to be performed with respect to a document associated with a case management instance based on an assigned document role of a requesting user and a permission required to perform the action and adjusting the one or more document permissions associated with respect to a first document node from the plurality of hierarchically related document nodes in response to a change associated with the specified state of the first document node of the plurality of hierarchically related document nodes, wherein each of the plurality of document nodes corresponds to a different portion of each document instance to which the document model applies.
12. The system of claim 11 , wherein the hierarchical document permission model is included in a case model definition with which said document instances are associated.
13. The system of claim 12 , wherein said document roles comprise case roles defined in said case model definition.
14. The system of claim 12 , wherein the hierarchical document permission model is associated with a case leaf node of a case model described in said case model definition.
15. The system of claim 11 , wherein the hierarchical document permission model associates the condition with extending the permission required to perform the action to users assigned to the assigned document role with respect to the document node.
16. A computer program product to manage a case, the computer program product being embodied in a non-transitory computer readable storage medium and comprising computer instructions for:
receiving a hierarchical document permission model, the hierarchical document permission model describing a document hierarchy of a document model comprising a plurality of document nodes that are hierarchically related, the hierarchical document permission model defining for each of at least a subset of said plurality of document nodes one or more document roles, and defining for each such document role of the one or more document roles one or more document permissions with respect to that document node, wherein the hierarchical document permission model associates the one or more document permissions with respect to that document node with a condition comprising a specified state of that document node; and
using the hierarchical document permission model to determine and enforce permissions with respect to document instances to which the hierarchical document permission model applies, wherein using the hierarchical document permission model comprises allowing an action to be performed with respect to a document associated with a case management instance based on an assigned document role of a requesting user and a permission required to perform the action and adjusting the one or more document permissions associated with respect to a first document node from the plurality of hierarchically related document nodes in response to a change associated with the specified state of the first document node, wherein each of the plurality of document nodes corresponds to a different portion of each document instance to which the document model applies.
17. The computer program product of claim 16 , wherein the hierarchical document permission model is included in a case model definition with which said document instances are associated.