Patent ID: 8904391
Filing Date: 2014-12-02
Classification: G06F,G06Q

Abstract:
1. A computer implemented method for dynamically assigning a staff activity to a human entity or organizational role, the computer implemented method comprising: receiving, from a process server, identification information defined by an output from a process development tool at development time, about a particular staff activity in a business process at an access control system external to the process server, wherein the identification information is a tuple comprising an identifier of the business process, an identifier of the particular staff activity in the business process, and business objects affected by actions of the particular staff activity and wherein the identification information is absent identification of an identified user; storing the tuple in an access policy store of the access control system, wherein the access policy store comprises role-based access control lists to form bindings between the staff activities and human entities or organizational roles using the identification information in the tuple and wherein the human entities, the organizational roles and deciding rules are able to be updated at deployment time; responsive to initiation of the business process, running the business process until the business process reaches a point in a workflow for the particular staff activity and dynamically resolving the particular staff activity at the access control system at runtime by assigning the particular staff activity to the identified user by an authorization policy engine in the access control system using an access policy of the access control system and the tuple stored to form a staff activity assignment, wherein resolving the particular staff activity at the access control system further includes: communicating the staff activity assignment from the access control system to the process server, wherein the staff activity assignment includes a process name, activity name pair of each activity awaiting intervention by the identified user; wherein the receiving, resolving, and communicating steps enable development of the business process to be decoupled from staff activity resolution at runtime.