The workflow satisfiability problem (WSP) is a well-studied problem in access control seeking allocation of authorised users to every step of the workflow, subject to workflow specification constraints. It was noticed that the number $k$ of steps is typically small compared to the number of users in the real-world instances of WSP; therefore $k$ is considered as the parameter in WSP parametrised complexity research. While WSP in general was shown to be W[1]-hard, WSP restricted to a special case of user-independent (UI) constraints is fixed-parameter tractable (FPT). However, restriction to the UI constraints might be impractical. To efficiently handle non-UI constraints, we introduce the notion of branching factor of a constraint. As long as the branching factors of the constraints are relatively small and the number of non-UI constraints is reasonable, WSP can be solved in FPT time. Extending the results from Karapetyan et al. (2019), we demonstrate that general-purpose solvers are capable of achieving FPT-like performance on WSP with arbitrary constraints when used with appropriate formulations. This enables one to tackle most of practical WSP instances. While important on its own, we hope that this result will also motivate researchers to look for FPT-aware formulations of other FPT problems.
翻译:工作流程的可支配性问题(WSP)是一个研究周全的问题,在进入控制方面,寻求授权用户分配到工作流程的每一步,但受工作流程规格限制的限制可能不切实际。注意到,与WSP实际案例的用户数目相比,步骤数目通常很小;因此,在WSP被忽略的复杂程度研究中,将K美元视为参数。一般而言,WSP被证明是W[1]-硬的,WSP仅限于用户独立(UI)限制的特殊案例。然而,对UFT限制的限制可能不切实际。为有效处理非UI限制,我们引入了限制的分支因素概念。只要限制的分支因素相对较少,非UPT限制的数量是合理的,WSP可以在FPT时间得到解决。扩大Karapetyan等人(2019年)的结果,我们证明通用解决者能够以任意限制方式在WSP上实现类似于FPT的功能,同时在使用适当的配方时,我们也能推动FSP的这种实际问题。