The User Management
Papyrus Objects uses an integrated authorization
system,
to ensure that no user or program can access the system
without the proper authorization. Authorized users have
full management control of all phases of correspondence
production, from document assembly to content approval.
Defining a Corporate Organization Hierarchy
All departments and their employees with
their various roles are to be known to the
system. Once the organization is defined,
the applications to be implemented with Papyrus
Objects need to be defined. These are organized
in libraries, which group all objects and
documents related to one user role together.
The Role and its Defined Privileges
Each user receives at least one role which
can also have a
privilege defined. The privilege string is defined in the method definition
of the object. The Policy defines which instances a user is allowed to access.
Example:
The user may be allowed to perform the method ‘delete’ for one
particular letter but he is only allowed to access the letter of a certain
department or one specific application type.
Authorization and Security User Roles and Policy define what the user
sees on the Papyrus Desktop GUI having a
certain role. Security is provided by data
and communication encryption.
Interfacing with RACF, LDAP and ACTIVE D:
Logging onto the Papyrus Desktop executes the given ID
and password from the customer’s existing security system. Papyrus can
interface with the company security system on
the mainframe (i.e. RACF) and provides Adapter i.e. for LDAP. Papyrus Objects
can also maintain security information by itself in its own storage.
The letter process uses state definition
A typical state sequence is:
1 |
Request: Enables method ‘edit’ |
2 |
Editing in progress: Enables method ‘send’ or ‘sign
off’ |
3a |
Send: Enables print |
3b |
Sign Off: Enables send |
4 |
Status printed: Enables method ‘archive’ |
5 |
Archived: No further change allowed:
Enables
method ‘view’ |
|