SF.net SVN: ledger-smb: [1574] trunk/sql/modules/Roles.sql

[..hidden..]

Revision: 1574
          http://ledger-smb.svn.sourceforge.net/ledger-smb/?rev=1574&view=rev
Author:   einhverfr
Date:     2007-09-11 23:37:22 -0700 (Tue, 11 Sep 2007)

Log Message:
-----------
More additions to role system

Modified Paths:
--------------
    trunk/sql/modules/Roles.sql

Modified: trunk/sql/modules/Roles.sql
===================================================================
--- trunk/sql/modules/Roles.sql	2007-09-12 06:14:03 UTC (rev 1573)
+++ trunk/sql/modules/Roles.sql	2007-09-12 06:37:22 UTC (rev 1574)
@@ -744,24 +744,60 @@
 CREATE ROLE lsmb_<?lsmb dbname ?>__create_transaction
 WITH INHERIT NOLOGIN;
 
+GRANT INSERT ON gl TO lsmb_<?lsmb dbname ?>__create_transaction;
+GRANT INSERT ON acc_trans TO lsmb_<?lsmb dbname ?>__create_transaction;
+
+INSERT INTO menu_acl (node_id, acl_type, role_name)
+values (73, 'allow', 'lsmb_<?lsmb dbname ?>__create_transaction');
+INSERT INTO menu_acl (node_id, acl_type, role_name)
+values (74, 'allow', 'lsmb_<?lsmb dbname ?>__create_transaction');
+INSERT INTO menu_acl (node_id, acl_type, role_name)
+values (75, 'allow', 'lsmb_<?lsmb dbname ?>__create_transaction');
+INSERT INTO menu_acl (node_id, acl_type, role_name)
+values (35, 'allow', 'lsmb_<?lsmb dbname ?>__create_transaction');
+INSERT INTO menu_acl (node_id, acl_type, role_name)
+values (40, 'allow', 'lsmb_<?lsmb dbname ?>__create_transaction');
+
+
 CREATE ROLE lsmb_<?lsmb dbname ?>__create_transaction_voucher
 WITH INHERIT NOLOGIN;
 
+GRANT INSERT ON gl TO lsmb_<?lsmb dbname ?>__create_transaction;
+GRANT INSERT ON acc_trans TO lsmb_<?lsmb dbname ?>__create_transaction;
+
+-- TODO Add menu permissions
+
 CREATE ROLE lsmb_<?lsmb dbname ?>__list_transactions
 WITH INHERIT NOLOGIN
 IN ROLE lsmb_<?lsmb dbname ?>__list_ar_transactions,
 lsmb_<?lsmb dbname ?>__list_ap_transactions;
 
+GRANT SELECT ON gl TO lsmb_<?lsmb dbname ?>__list_transactions;
+
+INSERT INTO menu_acl (node_id, acl_type, role_name)
+values (73, 'allow', 'lsmb_<?lsmb dbname ?>__list_transactions');
+INSERT INTO menu_acl (node_id, acl_type, role_name)
+values (76, 'allow', 'lsmb_<?lsmb dbname ?>__list_transactions');
+
+
 CREATE ROLE lsmb_<?lsmb dbname ?>__run_yearend
 WITH INHERIT NOLOGIN;
 
-CREATE ROLE lsmb_<?lsmb dbname ?>__create_list_batches
+GRANT INSERT, SELECT ON acc_trans TO lsmb_<?lsmb dbname ?>__run_yearend;
+
+INSERT INTO menu_acl (node_id, acl_type, role_name)
+values (128, 'allow', 'lsmb_<?lsmb dbname ?>__run_yearend');
+INSERT INTO menu_acl (node_id, acl_type, role_name)
+values (132, 'allow', 'lsmb_<?lsmb dbname ?>__run_yearend');
+
+
+CREATE ROLE lsmb_<?lsmb dbname ?>__list_batches
 WITH INHERIT NOLOGIN
-IN ROLE lsmb_<?lsmb dbname ?>__create_list_transactions;
+IN ROLE lsmb_<?lsmb dbname ?>__list_transactions;
 
-GRANT SELECT ON batch TO lsmb_<?lsmb dbname ?>__create_list_batches;
-GRANT SELECT ON batch_class TO lsmb_<?lsmb dbname ?>__create_list_batches;
-GRANT SELECT ON voucher TO lsmb_<?lsmb dbname ?>__create_list_batches;
+GRANT SELECT ON batch TO lsmb_<?lsmb dbname ?>__list_batches;
+GRANT SELECT ON batch_class TO lsmb_<?lsmb dbname ?>__list_batches;
+GRANT SELECT ON voucher TO lsmb_<?lsmb dbname ?>__list_batches;
 
 CREATE ROLE lsmb_<?lsmb dbname ?>__all_gl
 WITH INHERIT NOLOGIN
@@ -774,9 +810,13 @@
 CREATE ROLE lsmb_<?lsmb dbname ?>__create_project
 WITH INHERIT NOLOGIN;
 
-CREATE ROLE lsmb_<?lsmb dbname ?>__add_project_timecard
+CREATE ROLE lsmb_<?lsmb dbname ?>__edit_project
 WITH INHERIT NOLOGIN;
 
+CREATE ROLE lsmb_<?lsmb dbname ?>__add_project_timecard
+WITH INHERIT NOLOGIN
+IN ROLE lsmb_<?lsmb dbname ?>__read_contact;
+
 -- ORDER GENERATION
 CREATE ROLE lsmb_<?lsmb dbname ?>__project_generate_orders
 WITH INHERIT NOLOGIN;


This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site.