@techreport{TR-IC-01-14, number = {IC-01-14}, author = {Jacques Wainer and Akhil Kumar and Paulo Barthelmess}, title = {Security Management in the Presence of Delegation and Revocation in Workflow Systems}, month = {October}, year = {2001}, institution = {Institute of Computing, University of Campinas}, note = {In English, 18 pages. \par\selectlanguage{english}\textbf{Abstract} This paper extends the RBAC model to deal with permission in a workflow management system. The extended model allows for dynamic constraints on instances of processes. We also extend the model so that delegations from an user to another user, and revocations of such delegations are dealt with. We also discuss the issues on delegations from a user to a group of users. } }