Research And Realization On Dynamic Resiliency To User Assignment Of Organization Model

Modern organizations often follow some management models such as the ValIT framework and the CoBIT model or others. These models require an organization to identify the business goals it has to achieve, the business process activities which need to achieve those goals, the roles that are responsible for those achievements and the controls to make sure that no unwanted deviations occur. In most cases the organizational goals'achievement is even translated into monetary compensation on top of the salary for the users holding the corresponding roles. ERP companies are now providing modules (HCM) to manage the link between goals and human resources such as SAP.Currently there are always some fast organizational changes and employee turnover happening in the organizations like users are unavailable or they change roles because of a promotion. This kind of changes might compromise the execution of a business process instance and, thus, the achievement of the business goals. In this paper, we introduce the problem of dynamic resiliency to changes in the assignment of users to roles and focus on the implementation of the main dynamic resiliency algorithm.The goal of dynamic resiliency of a business process instance to changes in the assignment of users to roles is:during the execution of a business process, when users' assignment to roles changes, we want to judge if there is a "right" user to perform the activities which is still pending and without disobeying the authorization constraints. That means if there are some users fulfilling the condition, choose one and delegate to it the role that is entitled to execute the pending activity, otherwise, notify the business process administrator that there are some activities without users to perform.For the purpose of implementing the dynamic resiliency algorithm, we model an organization as a directed graph where the organizational business goals, the activities that implement these goals, the organizational roles and users assigned to these roles are represented by the vertex and the relations between them are represented by the directed edge using JGraphT Java API, and then visualize the organization model using JGraph Java API in the Monitor Service. The Monitor Service will store the related dynamic data in the database which the dynamic resiliency algorithm can share and update.We have proposed a system architecture that enables to integrate the approach to resiliency into a business process management system for SOA-based business process where some activities are performed by users. We assume that the SOA-based business process is specified using the WS-BPEL standard and the BPEL4People specification to denote the activities in the BPEL4People specification to denote the activities in the process that need to be performed by a user. The system architecture is composed of three main components:the Monitor Service, and the Enforcement Service, the Business Process Execution Engine.The Monitor Service provides to the business process administrator a graphical interface which allows the administrator to import and visualize the organizational model and apply changes to it. The Enforcement Service has two WSDL interfaces, one for the process and one for the user that are involved in the execution of a business process instance. The interface for the process provides the operations for starting and completing the execution of a business process activity that must be performed by a user. The business process engine is responsible for scheduling and synchronizing the various activities within the business process according to the specified control flow.Because of the time the whole system has not been implemented, we compiled a Java program to simulate the execution steps which can verify that the execution of a business process instance can normally terminate if there are some "right" users to perform each activity of the business process instance when there are changes in the assignment of users to roles, otherwise the business process instance will be hung-up and notify the administrator to determine whether to terminate the instance.