Hi
I would like to know if anyone out there is using ARIS to model data object access rights.
The challenge: I have user (application or individuals) who modify data entities. I would like to define what access rights they have (read, write, etc.). What kind of model should I use? What is the best object to describe those access rights?
What experience do you have? Is ARIS the right tool for it?
Any help / feedback is highly appreciated.
Klaus
Alexander Grobe on
Klaus,
you can either use access diagrams or program flow charts for your purpose.
These model types allow to you to connect a cluster/data object with application system type objects using 'create', 'read', 'update' and 'delete' (CRUD) relationship types. Internal persons objects can be connected to cluster/data objects using the 'accesses' relationsship type. To model the kind of access (CRUD operation) I would recommed to add an attribute with CRUD operation values to that releationship.
In ARIS 9 I guess you could just create the missing CRUD relationships as this brand new release allows you to extend the ARIS standard meta model (entire method) to your needs.
Hope this helps.
Alex