Dynamic Workflow State Control via Metadata-Resolved Pseudo-Users
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Traditional Enterprise Content Management (ECM) systems lack flexibility and fine-grained control in managing state transitions of electronic objects, as access control lists (ACLs) are statically defined and do not utilize direct or indirect metadata of the electronic objects, limiting dynamic and specific permission management.
Innovation Solution
The method involves determining pseudo-users allowed for state transitions by utilizing metadata properties, such as [Document].[ContentApprover] or [Document].[Project].[ProjectManager], to dynamically define permissions based on the electronic object's metadata, enabling more precise control over state transitions.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If access control lists are statically defined in traditional ECM systems, then system simplicity is maintained, but flexibility and fine-grained control in managing state transitions are limited
Solution Approach 1:
The patent transforms static access control lists into dynamic pseudo-users that automatically adapt to workflow context. Pseudo-users are defined based on metadata properties (e.g., document author, project manager) and are dynamically resolved at runtime, enabling flexible state transition control without manually configuring complex permission rules for each scenario.
Solution Approach 2:
The patent introduces pseudo-users as an intermediary layer between users and the workflow system. Instead of directly managing user permissions, the system uses pseudo-users that represent contextual roles (e.g., 'document author', 'project manager') which are resolved to actual users based on object metadata, simplifying permission management while enabling fine-grained control.
2Manufacturing precision
If static user groups are used for access control, then implementation is straightforward, but context-specific permission management is insufficient
Solution Approach 1:
The patent applies local quality by making permissions specific to each workflow object's context rather than applying uniform rules globally. Pseudo-users are defined based on local metadata properties of specific objects (e.g., the author of a specific document, the manager of a specific project), enabling precise control tailored to each object's needs without complex global configuration.
Solution Approach 2:
The system enables self-service by automatically resolving pseudo-users to actual users based on object metadata without requiring manual permission configuration. When a workflow object is created, the system automatically identifies relevant pseudo-users (e.g., document author, project manager) and resolves them to actual users, eliminating the need for administrators to manually configure permissions for each scenario.
3Adaptability or versatility
If metadata is not utilized for access control, then system complexity is reduced, but dynamic and specific permission management is limited
Solution Approach 1:
The patent makes metadata multi-functional by using it not only for workflow automation but also for defining access control permissions. The same metadata properties (e.g., author, project, department) that describe the object are also used to identify pseudo-users and determine permissions, eliminating the need for separate permission configuration systems and reducing overall complexity.
Data Source
AI summary
The invention relates to a method for controlling state transition of an electronic object in a workflow. The method comprises receiving a request for a state transition for an electronic object from a user; determining the current state of the object from a metadata of the electronic object; determining the next state after the state transition from the request; determining one or more pseudo-users that are allowed to perform a state transition from the current state to the next state; retrieving at least one person identity by utilizing at least one property in a metadata of the electronic object, which person identity is retrieved from a value of a property corresponding to the determined one or more pseudo-users; comparing the identity of the requesting user to the retrieved person identity, and if they match; performing a state transition according to the request.