Systems And Methods For Rule Inheritance

摘要

Systems and methods for automating and increasing the efficiency of access to data using inheritance of access rules within an organization based upon the relationship of positions within the organization and the roles associated with the positions. In one embodiment, a role structure is used in conjunction with a hierarchical organization structure to allow access rules to be inherited by some of the positions from other positions based upon the relationship of positions within the organization and the roles associated with the positions. Access rules can be applied across equivalent or similar positions, yet differentiated between distinct portions of the organization and the distinct roles associated with the positions. Consequently, particular access rules are not necessarily inherited by all of the positions subordinate to a particular position with which the rule originates, and are not necessarily inherited by all of the positions that are associated with a particular role.

主权项

1. A method implemented in a computer system having a business processor engine coupled to one or more data sources and one or more user interfaces, the method comprising:
defining a hierarchical structure of positions stored in the one or more data sources; for one or more of the positions, the business processor engine associating at least one of the one or more of the positions with one or more users; the business processor engine associating at least one of the one or more users or the one or more positions with one or more roles; the business processor engine associating one or more access rules for one or more business processes with a first one of the positions, wherein the one or more access rules are applicable to a first subset of the roles; for a first user associated with a second one of the positions which is subordinate to the first one of the positions in the hierarchical structure of positions, the business processor engine applying to the first user selected ones of the access rules that are applicable to ones of the roles that are associated with the first user and that are associated with the first one of the positions; and the business processor engine controlling user access to the one or more user interfaces by the first user to the one or more business processes according to the selected ones of the access rules.