Sketch Map Of Authorization

The Authorization of Workflow Management System consists of two parts : Sign On authentication and permission authorization. As shown in this figure, when a user login, the system judge t the user’s legitimation according to the user ID and company ID.If not, reject the user's logon request. If legitimate, view user roles, and saved in session information. When users need to carry out an action, the system will remove the user from a session with role, and check that you have permission to operate. If available, allow the user to the current operation, otherwise deny user to perform the operation.