Chapter 4. Authorization: Access to what 81
From a business process management point of view, you can very easily create groups which
are defined entirely based upon the needs of the business process. Yes, you can draw from
existing LDAP users and groups, but you are not constrained by the LDAP structures, nor are
you constrained by the logistics of which repository a given user may belong to.
This is the very essence of authorization: ensuring that only users who should have
permission to participate in a business process have that access.
So far, we have been looking at how to get your users into manageable groups that will be tied
to process applications. But what about the process applications themselves? How does one
specify the roles that ...