Access control for business process data

Abstract

Controlling access to business process data is disclosed. An instance of a first business process object configured to contain business process data of a business process is created. An instance of a second business process object configured to contain business process data of the business process is created. A first access control list is associated with the instance of the first business process object and a second access control list is associated with the instance of the second business process object.

What is claimed is: 
     
         1 . A method for controlling access to business process data, comprising:
 creating an instance of a first business process object configured to contain business process data of a business process;   creating an instance of a second business process object configured to contain business process data of the business process; and   associating with the instance of the first business process object with a first access control list, and associating the instance of the second business process object with a second access control list using a processor.   
     
     
         2 . The method as in  claim 1 , further comprising storing the business process object instances in a repository configured to allow access to the stored business process object instances according to the associated access control list. 
     
     
         3 . The method as in  claim 2 , wherein the repository is associated with a content management system. 
     
     
         4 . The method as in  claim 1 , wherein each of the access control lists is determined at a time prior to an instantiation of the instance of the business process. 
     
     
         5 . The method as in  claim 1 , wherein each of the access control lists is determined during a time of development of the business process. 
     
     
         6 . The method as in  claim 1 , wherein each of the access control list indicates a type of access that an application, a user, or a group of users is allowed. 
     
     
         7 . The method as in  claim 6 , wherein access includes a permission including one or more of the following: none, browse, read, relate, version, write, change location, change owner, change state, change permission, delete, execute, annotate, or approve. 
     
     
         8 . The method as in  claim 6 , wherein access includes a restriction including one or more of the following: none, browse, read, relate, version, write, change location, change owner, change state, change permission, delete, execute, annotate, or approve. 
     
     
         9 . The method as in  claim 6 , wherein access specifies a permission or a restriction for an application, a user, or a group of users. 
     
     
         10 . The method as in  claim 6 , wherein access specifies that an accessing party be a specific application, a specific user, or a specific group of users. 
     
     
         11 . The method as in  claim 6 , wherein access specifies that access is restricted if an accessing party is a specific application, a specific user, or a specific group of users. 
     
     
         12 . A computer program product for controlling access to business process data, the computer program product being embodied in a computer readable non-transitory medium and comprising computer instructions for:
 creating an instance of a first business process object configured to contain business process data of a business process;   creating an instance of a second business process object configured to contain business process data of the business process; and   associating with the instance of the first business process object with a first access is control list, and associating the instance of the second business process object with a second access control list.   
     
     
         13 . The computer program product as in  claim 12 , further comprising computer instructions for storing the business process object instances in a repository configured to allow access to the stored business process object instance according to the associated access control list. 
     
     
         14 . The computer program product as in  claim 13 , wherein the repository is associated with a content management system. 
     
     
         15 . The computer program product as in  claim 12 , wherein each of the access control lists associated with the business process object instance is determined at a time prior to an instantiation of an instance of the business process. 
     
     
         16 . The method as in  claim 12 , wherein each of the access control lists is determined during a time of development of the business process. 
     
     
         17 . A system for controlling access to business process data, comprising:
 a processor; and   a memory coupled with the processor, wherein the memory is configured to provide the processor with instructions which when executed cause the processor to:
 create an instance of a first business process object configured to contain business process data of a business process; 
 create an instance of a second business process object configured to contain business process data of the business process; and 
 associate with the instance of the first business process object with a first access control list, and associating the instance of the second business process object with a second access control list. 
   
     
     
         18 . The system as in  claim 16 , wherein the memory is configured to provide the processor with instructions which when executed cause the processor to: store the business process object instances in a repository configured to allow access to the stored business process object instance according to the associated access control list. 
     
     
         19 . The computer program product as in  claim 18 , wherein the repository is associated with a content management system. 
     
     
         20 . The computer program product as in  claim 17 , wherein each of the access control lists associated with the business process object instances is determined at a time prior to an instantiation of an instance of the business process. 
     
     
         21 . The computer program product as in  claim 17 , wherein each of the access control lists is determined during a time of development of the business process.