Workflow access control: From role engineering to task engineering

The need for “role engineering” becomes evident once a decision has been made to adopt RBAC (Role Based Access Control) to ensure access control in a computer system. Role engineering for role-based access control (RBAC) is a process to define roles, permissions, constraints, and role hierarchies. However, despite the wide use of RBAC in various applications, we noticed that the migration to RBAC is done without a suitable role engineering process.