In order to resolve the problem that users who lack of corresponding qualifications and ability in workflow environment might get access rights through its role, this paper presents attribute constraints before the tasks assignment.Users and tasks have certain attributes and corresponding attribute expressions, user attributes reflect their equipped aptitude and ability and task attributes indicate its requirements to users in qualifications and ability. The system authorizes to users only when the correspo...