The workflow satisfiability problem (wsp) is a problem of practical interest that arises whenever tasks need to be performed by authorized users, subject to constraints defined by business rules. We are required to decide whether there exists a plan–an assignment of tasks to authorized users–such that all constraints are satisfied. The wsp is, in fact, the conservative constraint satisfaction problem (i.e., for each variable, here called task, we have a unary authorization constraint) and is, thus,
‐complete. It was observed by Wang and Li (ACM Trans Inf Syst Secur 13(4):40, 2010) that the number
of tasks is often quite small and so can be used as a parameter, and several subsequent works have studied the parameterized complexity of wsp regarding parameter
. We take a more detailed look at the kernelization complexity of wsp(
) when
denotes a finite or infinite set of allowed constraints. Our main result is a dichotomy for the case that all constraints in
are regular: (1) We are able to reduce the number
of users to
. This entails a kernelization to size poly
for finite
, and, under mild technical conditions, to size poly
for infinite
, where
denotes the number of constraints. (2) Already wsp(
) for some
allows no polynomial kernelization in
unless the polynomial hierarchy collapses.