| 摘要 |
A method and a data processing system are presented, for controlling a workflow and for accessing data that is stored in computer-readable form and is modified in the course of the workflow. Thus, the following conventions and rules are implemented:
- A data set comprises one or more data items.
- A data set can potentially be acted upon (modified) by a user.
- A data set is defined (1) and associated with one of several statuses.
- A set of privileges is defined (2).
- Each user (or user identity) is associated with one or more privileges (3).
- Each status is associated (4) with at least one action-privileges pair. When interacting (5) with a user, an action by the user affecting a given data set in a given status is allowable if and only if
- the user privileges and
- the privileges of the action-privileges pair of said action in said status have at least one privilege in common. The set of conventions and the rule for action define a framework which allows to specify "who may when change what" in a very compact, non-redundant manner. Whether a particular data item or data set is changeable can be determined from the context (user and status) of the data set in an efficient manner.
|
