Hierarchical permissions model within a document
Case management systems and techniques are disclosed. In various embodiments, a hierarchical document permission model is received, the model describing a document hierarchy comprising a plurality of hierarchically related document nodes and defining for each of at least a subset of said document nodes one or more document roles and for each such role one or more document permissions with respect to that document node. The hierarchical document permission model is used to determine and enforce permissions with respect to case management instances to which the hierarchical document permission model applies.
1. A case management system, comprising:
a storage device configured to store a hierarchical document permission model that describes a document hierarchy of a document model comprising a plurality of document nodes that are hierarchically related and that defines:
a first document role for a first document node of the plurality of document nodes; and
a second document role for a second document node of the plurality of document nodes;
a first permission for the first document role with respect to the first document node, the first permission associated with a first condition comprising a specified state associated with the first document node; and
a second permission for the second document role with respect to the second document node, the second permission associated with a second condition comprising a specified state associated with the second document node; and
a processor coupled to the storage device and configured to use the hierarchical document permission model to determine and enforce permissions with respect to a document that has a plurality of portions, wherein each of the plurality of portions corresponds to a different one of the plurality of document nodes and wherein using the hierarchical document permission model comprises allowing an action to be performed with respect to the document based on an assigned document role of a requesting user and a permission required to perform the action.
2. The system of claim 1 , wherein the hierarchical document permission model is included in a case model definition with which a case management instance is associated.
3. The system of claim 2 , wherein said first document role comprises a first case role defined in said case model definition and said second document role comprises a second case role defined in said case model definition.
4. The system of claim 2 , wherein the hierarchical document permission model is associated with a case leaf node of a case model described in said case model definition.
5. The system of claim 1 , wherein the hierarchical document permission model associates the first condition with extending the permission required to perform the action to users assigned to the first document role with respect to the first document node.
6. The system of claim 1 , wherein the specified state associated with the first document node comprises a state of a first state machine associated with the first document node.
7. The system of claim 6 , wherein the specified state associated with the second document node comprises a state of a second state machine associated with the second document node.
8. The system of claim 1 , wherein the specified state associated with the first document node comprises a state of a state machine associated with a case node with which the document is associated.
9. The system of claim 1 , wherein the specified state associated with the first document node comprises a context data.
10. The system of claim 1 , wherein the processor is configured to extend the permission required to perform the action to the requesting user based at least in part on a determination that the first condition is satisfied.
11. The system of claim 1 , wherein the processor is configured to enforce the first permission with respect to the first document node and any descendant node that is below the first document node in the document hierarchy.
12. A computer program product embodied on a non-transitory computer readable storage medium and comprising instructions executable by a processor to:
receive a hierarchical document permission model that describes a document hierarchy of a document model comprising a plurality of document nodes that are hierarchically related and defines:
a first document role for a first document node of the plurality of document nodes; and
a second document role for a second document node of the plurality of document nodes;
a first permission for the first document role with respect to the first document node, the first permission associated with a first condition comprising a specified state associated with the first document node; and
a second permission for the second document role with respect to the second document node, the second permission associated with a second condition comprising a specified state associated with the second document node; and
use the hierarchical document permission model to determine and enforce permissions with respect to a document having a plurality of portions, wherein each of the plurality of portions corresponds to a different one of the plurality of document nodes and wherein using the hierarchical document permission model comprises allowing an action to be performed with respect to the document based on an assigned document role of a requesting user and a permission required to perform the action.
13. The computer program product of claim 12 , wherein the hierarchical document permission model is included in a case model definition with which a case management instance is associated.
14. The computer program product of claim 13 , wherein said first document role comprises a first case role defined in said case model definition and said second document role comprises a second case role defined in said case model definition.
15. The computer program product of claim 13 , wherein the hierarchical document permission model is associated with a case leaf node of a case model described in said case model definition.
16. The computer program product of claim 12 , wherein the hierarchical document permission model associates the first condition with extending the permission required to perform the action to users assigned to the first document role with respect to the first document node.
17. The computer program product of claim 12 , wherein the specified state associated with the first document node comprises a state of a first state machine associated with the first document node.
18. The computer program product of claim 17 , wherein the specified state associated with the second document node comprises a state of a second state machine associated with the second document node.
19. The computer program product of claim 12 , wherein the specified state associated with the first document node comprises a state of a state machine associated with a case node with which the document is associated.
20. The computer program product of claim 12 , wherein the specified state associated with the first document node comprises a context data.
21. The computer program product of claim 12 , further comprising instructions executable to determine that the first condition is satisfied and extend the permission required to perform the action the requesting user based at least in part on a determination that the first condition is satisfied.
22. The computer program product of claim 12 , wherein the instructions are executable by the processor to enforce the first permission with respect to the first document node and any descendant node that is below the first document node in the document hierarchy.