Hierarchical permissions model within a document
Case management systems and techniques are disclosed. In various embodiments, a hierarchical document permission model is received, the model describing a document hierarchy comprising a plurality of hierarchically related document nodes and defining for each of at least a subset of said document nodes one or more document roles and for each such role one or more document permissions with respect to that document node. The hierarchical document permission model is used to determine and enforce permissions with respect to case management instances to which the hierarchical document permission model applies.
1. A case model system, comprising:
a storage device;
a processor coupled to the storage device and configured to:
obtain a case model definition for a case model based on user input, the case model definition defining a document permission model associated with a document, the document permission model comprising a hierarchy of document permission nodes defining document level hierarchical permissions, wherein a document level hierarchical permission of a document permission node defines an authorization permission to update a corresponding document portion of the document, and wherein the case model definition is stored in the storage device; and
process the case model definition to generate a data structure that embodies the case model in a format consumable by a case management system to instantiate a case instance based on the case model and set the document level hierarchical permissions on the respective document portions of the document.
2. The case model system of claim 1 , wherein the hierarchy of document permission nodes comprises:
a first document permission node defining a first set of permissions for a first role with respect to a first respective document portion; and
a second document permission node defining a second set of permissions for the first role with respect to a second respective document portion.
3. The case model system of claim 1 , wherein the hierarchy of document permission nodes comprises:
a first document permission node defining a first set of permissions for a first role with respect to a first respective document portion; and
a second document permission node defining the first set of permissions for the first role with respect to a second respective document portion.
4. The case model system of claim 1 , wherein the hierarchy of document permission nodes comprises:
a first document permission node defining a first set of permissions for a first role with respect to a first respective document portion; and
a second document permission node defining a second set of permissions for a second role with respect to a second respective document portion.
5. The case model system of claim 1 , wherein the hierarchical document level permissions include at least one of a create permission, a read permission, an update permission or a delete permission.
6. The case model system of claim 1 wherein the processor is configured to dynamically determine the corresponding document level permission set with respect to the portion of the document based on a state machine.
7. The case model system of claim 1 , wherein generating the data structure comprises generating an XML data file that embodies the case model definition.
8. A computer program product embodied on a non-transitory computer readable storage medium and comprising instructions executable by a processor to:
obtain a case model definition for a case model based on user input, the case model definition defining a document permission model associated with a document, the document permission model comprising a hierarchy of document permission nodes defining document level hierarchical permissions, wherein a document level hierarchical permission of a document permission node defines an authorization permission to update a corresponding document portion of the document;
store the case model definition on a storage device; and
process the case model definition to generate a data structure that embodies the case model in a format consumable by a case management system to instantiate a case instance based on the case model and set the document level hierarchical permissions on the respective document portions of the document.
9. The computer program product of claim 8 , wherein the hierarchy of document permission nodes comprises:
a first document permission node defining a first set of permissions for a first role with respect to a first respective document portion; and
a second document permission node defining a second set of permissions for the first role with respect to a second respective document portion.
10. The computer program product of claim 8 , wherein the hierarchy of document permission nodes comprises:
a first document permission node defining a first set of permissions for a first role with respect to a first respective document portion; and
a second document permission node defining the first set of permissions for the first role with respect to a second respective document portion.
11. The computer program product of claim 8 , wherein the hierarchy of document permission nodes comprises:
a first document permission node defining a first set of permissions for a first role with respect to a first respective document portion; and
a second document permission node defining a second set of permissions for a second role with respect to a second respective document portion.
12. The computer program product of claim 8 , wherein the hierarchical document level permissions include at least one of a create permission, a read permission, an update permission or a delete permission.
13. The computer program product of claim 8 , further comprising instructions executable to dynamically determine the corresponding document level permission set with respect to the portion of the document based on a state of a state machine.
14. The computer program product of claim 8 , wherein generating the data structure comprises generating an XML data file that embodies the case model definition.
15. A method comprising:
obtaining a case model definition for a case model based on user input, the case model definition defining a document permission model associated with a document, the document permission model comprising a hierarchy of document permission nodes defining document level hierarchical permissions, wherein a document level hierarchical permission of a document permission node defines an authorization permission to update a corresponding document portion of the document;
storing the case model definition on a storage device; and
processing the case model definition to generate a data structure that embodies the case model in a format consumable by a case management system to instantiate a case instance based on the case model and set the document level hierarchical permissions on the respective document portions of the document.
16. The method of claim 15 , wherein the hierarchy of document permission nodes comprises:
a first document permission node defining a first set of permissions for a first role with respect to a first respective document portion; and
a second document permission node defining a second set of permissions for the first role with respect to a second respective document portion.
17. The method of claim 15 , wherein the hierarchy of document permission nodes comprises:
a first document permission node defining a first set of permissions for a first role with respect to a first respective document portion; and
a second document permission node defining the first set of permissions for the first role with respect to a second respective document portion.
18. The method of claim 15 , wherein the hierarchy of document permission nodes comprises:
a first document permission node defining a first set of permissions for a first role with respect to a first respective document portion; and
a second document permission node defining a second set of permissions for a second role with respect to a second respective document portion.
19. The method of claim 15 , wherein the hierarchical document level permissions include at least one of a create permission, a read permission, an update permission or a delete permission.
20. The method of claim 15 , further comprising dynamically determining, by the processor, the corresponding document level permission set with respect to the portion of the document based on a state of a state machine.