Abstract: A system for providing complex access control in workflows. The system comprises a computer, including a computer readable storage medium and processor operating thereon. The system also comprises at least one business process which includes a plurality of tasks. Each task is associated with a task state which changes during execution of the task. The system further comprises a plurality of logical roles. Each logical role defines a responsibility based on the task state and a member of that logical role. Additionally, the system comprises a configurable matrix of access controls that is used to control access to the plurality of tasks based on the plurality of logical roles.

Abstract: A system for managing a logical people group. The system comprises a computer, including a computer readable medium and processor operating thereon. The system also comprises a query module, executing on the computer, operable to receive a complex query and return a logical group of users. The query module is operable to search, based on the complex query, across a plurality of information sources including a user directory, a plurality of roles, and an attribute directory. The system also comprises a query cache which stores, for a user-definable period, a reverse lookup table of users and the logical groups to which the users belong based on previously received complex queries.

Abstract: A system for providing complex access control in workflows. The system comprises a computer, including a computer readable storage medium and processor operating thereon. The system also comprises at least one business process which includes a plurality of tasks. Each task is associated with a task state which changes during execution of the task. The system further comprises a plurality of logical roles. Each logical role defines a responsibility based on the task state and a member of that logical role. Additionally, the system comprises a configurable matrix of access controls that is used to control access to the plurality of tasks based on the plurality of logical roles.

Abstract: A system for managing a logical people group. The system comprises a computer, including a computer readable medium and processor operating thereon. The system also comprises a query module, executing on the computer, operable to receive a complex query and return a logical group of users. The query module is operable to search, based on the complex query, across a plurality of information sources including a user directory, a plurality of roles, and an attribute directory. The system also comprises a query cache which stores, for a user-definable period, a reverse lookup table of users and the logical groups to which the users belong based on previously received complex queries.

Abstract: A metadata validation process that allows for deferring object model validation until after the objects are created. The process also allows for multi-threaded processing of the validation rules, thus increasing overall performance. Validation is performed by enforcing a series of validation rules on an appropriate subject. Rules are specified according to the subject that they are validating (i.e., attribute level, association level, object level or collection level). The metadata driven validation process implements several validation types on different validation units. Correctness validation rule types ensure that a validation unit satisfies all semantic rules defined for it. Completeness validation rule types ensure that a validation unit contains all the necessary data and is ready for further use. At design time, only correctness type validation is performed. Thus, the present invention advantageously allows for incomplete objects to be created at design time.

Abstract: A metadata validation process that allows for deferring object model validation until after the objects are created. The process also allows for multi-threaded processing of the validation rules, thus increasing overall performance. Validation is performed by enforcing a series of validation rules on an appropriate subject. Rules are specified according to the subject that they are validating (i.e., attribute level, association level, object level or collection level). The metadata driven validation process implements several validation types on different validation units. Correctness validation rule types ensure that a validation unit satisfies all semantic rules defined for it. Completeness validation rule types ensure that a validation unit contains all the necessary data and is ready for further use. At design time, only correctness type validation is performed. Thus, the present invention advantageously allows for incomplete objects to be created at design time.