Cool Project/User role

User roles authorization logic

Logic to authorize user actions based on his roles for selected business entity.

User roles

• Owner (all rights)
  • User admin: Own user level and lower
  • Default user role when a user create an account: Owner
  • Owner may also delete other owners.

• Admin
  • May Create, Edit and "delete" data
  • User admin: own user level and lower

• User
  • May see all data.

Algorithms implemented at a later stage.

• No user level may "delete" (Disable) own user
• However, a owner may close own account.
• An owner may also disable a business unit at a lower level.
• If an account is closed (Disabled) then also lower levels are disabled.