A framework for access control in workflow systems
Workflow systems are often associated with business process re-engineering (BPR). This paper argues that the functional access control requirements in workflow systems are rooted in the scope of a BPR project. A framework for access control in workflow systems is developed. The framework suggests that existing role-based access control mechanisms can be used as a foundation in workflow systems. The framework separates the administration-time and the run-time aspects. Key areas that must be investigated to meet the functional requirements imposed by workflow systems on access control services are identified.