Descendent case role alias
Case management systems and techniques are disclosed. In various embodiments, a definition is received that associates a descendant case role alias with a first case node at a first hierarchical level of a hierarchical data model, the definition further associating a permission with the descendant case role alias and referencing a referenced case role associated with a second case node at a second hierarchical level of the hierarchical data model. The definition is used to extend the permission to a user assigned to the referenced case role with respect to a case instance comprising the hierarchical data model.
1. A method of controlling access in a case management system, the method comprising:
receiving, by a device processor, a definition that associates a descendant case role alias with a first case node at a first hierarchical level of a hierarchical data model, the definition further associating a permission with the descendant case role alias and referencing a referenced case role associated with a second case node at a second hierarchical level of the hierarchical data model, wherein the second hierarchical level is a descendant of the first hierarchical level within the hierarchical data model; and
automatically controlling access to a case instance of a case model comprising the hierarchical data model, content associated with the case instance, and actions associated with the case instance in the case management system, at least in part by using the definition to extend the permission to a user assigned to the referenced case role with respect to the case instance.
2. The method of claim 1 , wherein the permission is extended to the user with respect to the first case node.
3. The method of claim 1 , wherein the permission is extended to the user with respect to the first case node but not with respect to one or more other case nodes that are below the first case node in a hierarchy of the hierarchical data model.
4. The method of claim 1 , wherein the first case node comprises a root case node and the permission is extended to the user with respect to the root case node and all other case nodes included in the case instance.
5. The method of claim 1 , wherein the referenced case role is contained within the second case node.
6. The method of claim 3 , wherein permissions associated directly with the referenced case role extend only to the second case node and one or more case nodes included in a sub-tree of which the second case node comprises a sub-tree root.
7. The method of claim 1 , further comprising receiving an indication that a new user has been assigned to the referenced case role, and automatically extending to the new user said permission associated with the descendant case role alias.
8. The method of claim 1 , wherein the definition comprises a hierarchical permission model.
9. The method of claim 1 , wherein the definition comprises the case model.
10. The method of claim 1 , wherein using the definition to extend the permission to a user assigned to the referenced case role with respect to the case instance comprises:
receiving a request to perform an action with respect to the first case node, wherein the action requires said permission; and
allowing the action based at least in part on a determination that a requesting user with which the request is associated is assigned the referenced case role.
11. A case management system, comprising:
a storage device configured to store a hierarchical data model; and
a processor coupled to the storage device and configured to control access in the case management system by:
receiving a definition that associates a descendant case role alias with a first case node at a first hierarchical level of the hierarchical data model, the definition further associating a permission with the descendant case role alias and referencing a referenced case role associated with a second case node at a second hierarchical level of the hierarchical data model, wherein the second hierarchical level is a descendant of the first hierarchical level within the hierarchical data model; and
automatically controlling access to a case instance of a case model comprising the hierarchical data model, content associated with the case instance, and actions associated with the case instance in the case management system, at least in part by using the definition to extend the permission to a user assigned to the referenced case role with respect to the case instance.
12. The system of claim 11 , wherein the permission is extended to the user with respect to the first case node.
13. The system of claim 11 , wherein the permission is extended to the user with respect to the first case node but not with respect to one or more other case nodes that are below the first case node in a hierarchy of the hierarchical data model.
14. The system of claim 11 , wherein the referenced case role is contained within the second case node.
15. The system of claim 11 , wherein permissions associated directly with the referenced case role extend only to the second case node and one or more case nodes included in a sub-tree of which the second case node comprises a sub-tree root.
16. The system of claim 11 , wherein the processor is further configured to control access in the case management system by receiving an indication that a new user has been assigned to the referenced case role, and automatically extending to the new user said permission associated with the descendant case role alias.
17. The system of claim 11 , wherein using the definition to extend the permission to a user assigned to the referenced case role with respect to the case instance comprises:
receiving a request to perform an action with respect to the first case node, wherein the action requires said permission; and
allowing the action based at least in part on a determination that a requesting user with which the request is associated is assigned the referenced case role.
18. A computer program product to control access in a case management system, the computer program product being embodied in a non-transitory computer readable storage medium and comprising computer instructions for:
receiving a definition that associates a descendant case role alias with a first case node at a first hierarchical level of a hierarchical data model, the definition further associating a permission with the descendant case role alias and referencing a referenced case role associated with a second case node at a second hierarchical level of the hierarchical data model, wherein the second hierarchical level is a descendant of the first hierarchical level within the hierarchical data model; and
automatically controlling access to a case instance of a case model comprising the hierarchical data model, content associated with the case instance, and actions associated with the case instance in the case management system, at least in part by using the definition to extend the permission to a user assigned to the referenced case role with respect to the case instance.
19. The computer program product of claim 18 , wherein using the definition to extend the permission to a user assigned to the referenced case role with respect to the case instance comprising the hierarchical data model comprises:
receiving a request to perform an action with respect to the first case node, wherein the action requires said permission; and
allowing the action based at least in part on a determination that a requesting user with which the request is associated is assigned the referenced case role.
20. The computer program product of claim 18 , further comprising computer instructions for receiving an indication that a new user has been assigned to the referenced case role, and automatically extending to the new user said permission associated with the descendant case role alias.