Access Control for Monitoring System-Spanning Business Processes in Proviado

Bassil, Sarrita and Reichert, Manfred and Bobrik, Ralph and Bauer, Thomas (2009) Access Control for Monitoring System-Spanning Business Processes in Proviado. In: 3rd Int'l Workshop on Enterprise Modelling and Information Systems Architectures (EMISA'09), September 2009, Ulm, Germany.

[thumbnail of EMISA_BRBB09.pdf]
PDF - Requires a PDF viewer such as GSview, Xpdf or Adobe Acrobat Reader
Download (368kB)


Integrated process support is highly desirable in environments where data related to a particular (business) process are scattered over distributed, heterogeneous information systems (IS). A process monitoring component is a much-needed module in order to provide an integrated view on all these process data. Regarding process data integration, access control (AC) issues are very important but also quite complex to be addressed. A major problem arises from the fact that the involved IS are usually based on heterogeneous AC components. For several reasons, the only feasible way to tackle the problem of AC at the process monitoring level is to define access rights for the process monitoring component, hence getting rid of the burden to map access rights from the IS level. This paper discusses requirements for AC in process monitoring, which we derived from our case studies in the automotive domain. It then presents alternative approaches for AC: the view-based and the object-based approach. The latter is retained, and a core AC model is proposed for the definition of access rights that meet the derived requirements. AC mechanisms provided within the core model are key ingredients for the definition of model extensions.

Item Type: Conference or Workshop Item (Paper)
Subjects: DBIS Research > Publications
Depositing User: Prof. Dr. Manfred Reichert
Date Deposited: 31 Jul 2009 21:59
Last Modified: 19 Aug 2013 19:36

Actions (login required)

View Item
View Item