Hierarchical case model access roles and permissions
Hierarchical case model access roles and permissions are described. A system creates, for a child node associated with a parent node in a case model, a reference to a case role associated with the parent node. The system assigns another set of access permissions to the reference. The system determines access to the child node based on the set of access permissions in response to a request associated with the case role to access the child node.
1 . A system for hierarchical case model access roles and permissions, the system comprising:
a processor-based application executed on a computer and configured to:
create a hierarchical case model including a parent node and a child node associated with the parent node;
associate a plurality of case roles with the parent node, wherein each case role has a plurality of access permissions assigned thereto at a parent node level;
create, for the child node, a reference to a first case role of the plurality of case roles associated with the parent node, the first case role having a plurality of access permissions assigned to the first case role;
selectively assign to the reference a first set of access permissions, the first set of access permissions including a sub-set of access permissions from the plurality of access permissions assigned to the first case role at the parent node level and one or more access permissions absent from the plurality of access permissions assigned to the first case role at the parent node level; and
in response to a request to access the child node, determine access to the child node based on the first set of access permissions.
2 . The system of claim 1 , wherein the first set of permissions is assigned from a group comprising create permission, read permission, update permission, delete permission, and no access permission.
3 . The system of claim 1 , wherein assigning the first set of access permissions to the reference is based on inheriting another set of access permissions associated with the first case role.
4 . The system of claim 1 , wherein assigning the first set of access permissions to the reference comprises deleting an access permission from the reference that is present in another set of access permissions associated with the first case role.
5 . The system of claim 1 , wherein the processor-based application is further configured to:
create an additional case role for the child node;
assign an additional set of access permissions to the additional case role; and
determine access to the child node based on the additional set of access permissions in response to a request associated with the additional case role to access the child node.
6 . The system of claim 1 , wherein the processor-based application is further configured to delete the reference from the child node.
7 . A computer-implemented method for hierarchical case model access roles and permissions, the method comprising:
creating a hierarchical case model including a parent node and a child node associated with the parent node;
associating a plurality of case roles with the parent node, wherein each case role has a plurality of access permissions assigned thereto at a parent node level;
creating, for the child node, a reference to a first case role of the plurality of case roles associated with the parent node, the first case role having a plurality of access permissions assigned to the first case role;
selectively assigning to the reference a first set of access permissions, the first set of access permissions including a sub-set of access permissions from the plurality of access permissions assigned to the first case role at the parent node level and one or more access permissions absent from the plurality of access permissions assigned to the first case role at the parent node level; and
in response to a request to access the child node, determining access to the child node based on the first set of access permissions.
8 . The method of claim 7 , wherein the first set of permissions is assigned from a group comprising create permission, read permission, update permission, delete permission, and no access permission.
9 . The method of claim 7 , wherein assigning the first set of access permissions to the reference is based on inheriting another set of access permissions associated with the first case role.
10 . The method of claim 7 , wherein assigning the first set of access permissions to the reference comprises deleting an access permission from the reference that is present in another set of access permissions associated with the first case role.
11 . The method of claim 7 , wherein the method further comprises:
creating an additional case role for the child node;
assigning an additional set of access permissions to the additional case role; and determining access to the child node based on the additional set of access permissions in response to a request associated with the additional case role to access the child node.
12 . A computer program product, comprising a non-transitory computer-readable medium having a computer-readable program code embodied therein to be executed by one or more processors, the program code including instructions to:
create a hierarchical case model including a parent node and a child node associated with the parent node;
associate a plurality of case roles with the parent node, wherein each case role has a plurality of access permissions assigned thereto at a parent node level;
create, for the child node, a reference to a first case role of the plurality of case roles associated with the parent node, the first case role having a plurality of access permissions assigned to the first case role;
selectively assign to the reference a first set of access permissions, the first set of access permissions including a sub-set of access permissions from the plurality of access permissions assigned to the first case role at the parent node level and one or more access permissions absent from the plurality of access permissions assigned to the first case role at the parent node level; and
in response to a request to access the child node, determine access to the child node based on the first set of access permissions.
13 . The computer program product of claim 12 , wherein the first set of permissions is assigned from a group comprising create permission, read permission, update permission, delete permission, and no access permission.
14 . The computer program product of claim 12 , wherein assigning the first set of access permissions to the reference is based on inheriting another set of access permissions associated with the first case role.
15 . The computer program product of claim 12 , wherein assigning the first set of access permissions to the reference comprises deleting an access permission from the reference that is present in another set of access permissions associated with the first case role.
16 . The computer program product of claim 12 , wherein the program code includes further instructions to:
create an additional case role for the child node;
assign an additional set of access permissions to the additional case role; and determine access to the child node based on the additional set of access permissions in response to a request associated with the additional case role to access the child node.
17 . The computer program product of claim 12 , wherein the program code includes further instructions to delete the reference from the child node.