Roles for 1.3-- feedback?

["Chris Travers" <..hidden..>]

Some information is presumed public (meaning user-accessible), such as the structure of the 
CoA but not necessarily the balances or transactions.
We could add permissions on these somewhere in 1.4 as well but the dependencies are likely to take a while to sort out.

I:  Contact Management:
create_contact
edit_contact
read_contact
contact_all_rights (member of all of the above)

II:  AR: (all are members of read_contact)
create_ar_transaction
create_ar_transaction_voucher
create_ar_invoice
create_ar_invoice_voucher
list_ar_transactions
ar_all_vouchers
ar_all_transactions
create_sales_order
create_sales_quotation
list_sales_orders
list_sales_quotations

III:  AP:  (all members of read_contact)
create_ap_transaction
create_ap_transaction_voucher
create_ap_invoice
create_ap_invoice_voucher
ap_all_vouchers
ap_all_transactions
create_purchase_order
list_purchase_orders
list_purchase_rfq (not list_rfq because we may want to add a sales rfq 
tracking facility later).


IV:  POS (all members of read_contact)
create_pos_invoice
list_all_open
close_till

V: CASH
reconcile
process_recept(member of ar_list_transactions)
process_payment(member of ap_list_transactions)

Note that cash transfer is really just a subset of GL and is under that 
privilege instead

VI: Inventory Control
create_parts (note: includes invoices, etc)
inventory_reports
stock_assemblies
ship_inventory
receive_inventory
create_warehouse
(listing warehouses is presumed to be public)

VII:  GL
create_transaction
create_transaction_voucher
list_transactions (member of list_contact, list_ar_transactions, 
list_ap_transactions)

VIII:  Projects
create_project
(the ability to list projects is considered public unless there are any 
objections because many other areas of the application depend on this)
add_project_timecard
the ability to list transactions is assumed to be part of the relevant 
GL role.

IX:  Order Generation
project_generate_orders
consolidate_sales_orders
consolidate_purchase_orders
sales_to_purchase_orders

X: Financial Reports
(inventory reports are listed above)
run_financial_reports

XI:  Recurring Transactions
set_recurring
list_recurring

X:  Batch Printing
list_jobs
print_jobs

XI:  System Settings
system settings include the audit controls and defaults screen.
list_system_settings
change_system_settings
set_taxes
run_yearend
create_account
edit_account
create_gifi
edit_gifi
create_department
edit_department
create_business_type
edit_business_type
create_sic
edit_sic
edit_template
-- suggest we remove the ability to edit the stylesheet from the program

XII:  Manual Translation
create_langauge
create_part_translation
create_project_translation

XIII: Batches and Vouchers
create_batch (implied in all *_voucher permissions)
list_batches (lists batches *and* vouchers in a batch)
post_batch

How does this look?  Any feedback?

Best WIshes,
Chris Travers