Hierarchical case model access roles and permissions
Hierarchical case model access roles and permissions are described. A system creates, for a child node associated with a parent node in a case model, a reference to a case role associated with the parent node. The system assigns another set of access permissions to the reference. . The system determines access to the child node based on the set of access permissions in response to a request associated with the case role to access the child node.
1. A system for hierarchical case model access roles and permissions, the system comprising:
a hardware processor;
a processor-based application, which when executed on a computer, will cause the processor to;
at design time, create, for a child node associated with a parent node in a case model, a reference to a case role associated with the parent node, the reference inheriting a first set of access permissions associated with the case role from the parent node, the first set of access permissions including at least one access permission associated with content management;
at design time, assign, for the child node, at least one additional access permission to create a second set of access permissions assigned to the reference to the case role associated with the parent node, the second set of access permissions comprising the inherited first set of access permissions and the at least one additional access permission;
create an instance of the case model from the case model; and
at run time, determine access to an instance of the child node based on the second set of access permissions in response to a request associated with the case role to access the instance of the child node, wherein the instance of the child node is in the instance of the case model.
2. The system of claim 1 , wherein the second set of access permissions includes a permission assigned from a group comprising a create permission, a read permission, an update permission, a delete permission, and a no access permission.
3. The system of claim 1 , wherein assigning the second set of access permissions to the reference is based on inheriting a third set of access permissions associated with the case role.
4. The system of claim 3 , wherein assigning the second set of access permissions to the reference comprises assigning an additional access permission to the reference that is absent from the third set of access permissions associated with the case role.
5. The system of claim 1 , wherein the processor-based application will, when executed, further cause the processor to:
create an additional case role for the child node;
assign a fourth set of access permissions to the additional case role; and
determine access to the child node based on the fourth set of access permissions in response to a request associated with the additional case role to access the child node.
6. A computer-implemented method for hierarchical case model access roles and permissions, the method comprising;
at design time, creating, for a child node associated with a parent node in a case model, a reference to a case role associated with the parent node, the reference inheriting a first set of access permissions associated with the case role from the parent node, the first set of access permissions including at least one access permission associated with content management;
at design time, assigning, for the child node, at least one additional access permission to create a second set of access permissions assigned to the reference to the case role associated with the parent node, the second set of access permissions comprising the inherited first set of access permissions and the at least one additional access permission;
creating an instance of the case model from the case model; and
at run time, determining access to an instance of the child node based on the second set of access permissions in response to a request associated with the case role to access the instance of the child node, wherein the instance of the child node is in the instance of the case model.
7. The method of claim 6 , wherein the second set of access permissions includes a permission assigned from a group comprising a create permission, a read permission, an update permission, a delete permission, and a no access permission.
8. The method of claim 6 , wherein assigning the second set of access permissions to the reference is based on inheriting a third set of access permissions associated with the case role.
9. The method of claim 8 , wherein assigning the second set of access permissions to the reference comprises assigning an additional access permission to the reference that is absent from the third set of access permissions associated with the case role.
10. The method of claim 6 , wherein the method further comprises:
creating an additional case role for the child node;
assigning a fourth set of access permissions to the additional case role; and determining access to the child node based on the fourth set of access permissions in response to a request associated with the additional case role to access the child node.
11. A computer program product, comprising a non-transitory computer-readable medium haying a computer-readable program code embodied therein to be executed by one or more processors, the program code including instructions to cause the one or more processors to:
at design time, create, for a child node associated with a parent node in a case model, a reference to a case role associated with the parent node, the reference inheriting a first set of access permissions associated with the case role from the parent node, the first set of access permissions including at least one access permission associated with content management;
at design time, assign, for the child node, at least one additional access permission to create a second set of access permissions assigned to the reference to the case role associated with the parent node, the second set of access permissions comprising the inherited first set of access permissions and the at least one additional access permission;
create an instance of the case model from the case model; and
at run time, determine access to an instance of the child node based on the second set of access permissions in response to a request associated with the case role to access the instance of the child node, wherein the instance of the child node is in the instance of the case model.
12. The computer program product of claim 11 , wherein the second set of access permissions includes a permission assigned from a group comprising a create permission, a read permission, an update permission, a delete permission, and a no access permission.
13. The computer program product of claim 11 , wherein assigning the second set of access permissions to the reference is based on inheriting a third set of access permissions associated with the case role.
14. The computer program product of claim 13 , wherein assigning the second set of access permissions to the reference comprises assigning an additional access permission to the reference that is absent from the third set of access permissions associated with the case role.
15. The computer program product of claim 11 , wherein the program code includes further instructions to:
create an additional case role for the child node;
assign a fourth set of access permissions to the additional case role; and
determine access to the child node based on the fourth set of access permissions in response to a request associated with the additional case role to access the child node.