New models for secure rule-based workflow systems are developed. They are based on a general model for role-access control.