Cool Project/User role

From PMISwiki
Jump to navigation Jump to search

User roles authorization logic

Logic to authorize user actions based on his roles for selected business entity.

User roles

  • Owner (all rights)
    • User admin: Own user level and lower
    • Default user role when a user create an account: Owner
    • Owner may also delete other owners.
  • Admin
    • May Create, Edit and "delete" data
    • User admin: own user level and lower
  • User
    • May see all data.

Algorithms implemented at a later stage.

  • No user level may "delete" (Disable) own user
  • However, a owner may close own account.
  • An owner may also disable a business unit at a lower level.
  • If an account is closed (Disabled) then also lower levels are disabled.