Hi,
BPMN 2.0 does not specify anything about security. Maybe you can clarify your concrete scenario. I currently see three points, where security could take effect:
- Starting a process instance
- Securing a Service Task
- Securing Human Tasks (evaluate Assignees/Candidates)
Since all this is not specified, you could think for using (Boundry-) Events to solve it.
How would you handle the compensation? Would you rollback the whole process if you get a deny (or maybe try again later) or how should the process behave in this situation?
Regards,
michael