[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: Roles for 1.3-- feedback?
- Subject: Re: Roles for 1.3-- feedback?
- From: John Locke <..hidden..>
- Date: Thu, 09 Aug 2007 15:16:56 -0700
Chris Travers wrote:
>
> I think we should probably add some summary roles too which allow one
> to provide broad permissions across modules instead of having to
> create them all. Furthermore, we should be able to extend this (maybe
> in 1.4) to be able to define custom roles with certain permissions.
> Nothing is likely to prevent people from doing this themselves in 1.3,
> however.
>
> Any suggestions on summary roles are appreciated, however.
I'm thinking (partial list): "AP", "AR", "Cashier",
"Shipping/Receiving", "Bookkeeper", "Accountant", "HR", "Employee",
"Manufacturing", "Sales". That's what comes to mind...
>
> Yeah, we will need separate permissions for employees. Thanks. Will
> add (see the power of peer review?).
>
> Something like:
>
> EMPLOYEE:
>
> create_employee (member of create_contact)
> edit_employee (member of edit_contact)
> an ability to list employees is currently considered available to all
> users unless there are objections.
Hmm. I have worked in places where they don't want people to be able to
look up home numbers/addresses of other employees... Also possibly for
outsourced bookkeepers... I would think inheriting the read_contact
right should cover this case, maybe?
>
> The other suggestion I have is to have some sort of group
> functionality,
> so we don't need to configure every single user with each associated
> right. I'm thinking of groups such as "cashier", "shipping/receiving",
> "AP", etc, which can be associated with sets of rights. Then can add
> users to these groups and override individual permissions only if
> necessary. Maybe this is already planned?
>
>
> These will use DB roles, so permission is always cumulative.
>
> I don't think an easy way to add groups through the interface will be
> available in 1.3, probably will in 1.4, but I would expect it to be
> fairly easy in the implementation stage to add additional group roles
> for this version.
Sounds good!
Cheers,
--
John Locke
"Open Source Solutions for Small Business Problems"
published by Charles River Media, June 2004
http://www.freelock.com