1 package FS::AccessRight;
4 use vars qw(@rights); # %rights);
9 FS::AccessRight - Access control rights.
15 my @rights = FS::AccessRight->rights;
17 #my %rights = FS::AccessRight->rights_categorized;
18 tie my %rights, 'Tie::IxHash', FS::AccessRight->rights_categorized;
19 foreach my $category ( keys %rights ) {
20 my @category_rights = @{ $rights{$category} };
25 Access control rights - Permission to perform specific actions that can be
26 assigned to users and/or groups.
32 # '_desc' => 'Access to high-level reporting',
34 # 'Configuration' => [
35 # '_desc' => 'Access to configuration',
40 # '_desc' => 'Master access to reseller configuration',
45 # 'export_svc_pkg' => [
46 # '_desc' => 'Access to export, service and package configuration',
47 # 'part_export' => {},
54 # '_desc' => 'Access to billing configuration',
55 # 'payment_gateway' => {},
56 # 'prepay_credit' => {},
58 # 'cust_main_county' => {},
62 # '_desc' => 'Access to dialup configuraiton',
63 # 'svc_acct_pop' => {},
67 # '_desc' => 'Access to broadband configuration',
73 # 'part_referral' => {},
74 # 'part_virtual_field' => {},
76 # 'inventory_class' => {},
83 ##turn it into a more hash-like structure, but ordered via IxHash
85 #well, this is what we have for now. getting better.
86 tie my %rights, 'Tie::IxHash',
91 'Contact and Prospect rights' => [
97 #'View customer contacts',
103 # basic customer rights
105 'Customer rights' => [
108 #'View Customer | View tickets',
110 'Edit customer tags',
111 'Edit referring customer',
112 'Edit customer invoice terms',
113 'View customer history',
115 'Unsuspend customer',
117 'Complimentary customer', #aka users-allow_comp
119 'Merge customer across agents',
120 'Bill customer now', #NEW
121 'Bulk send customer notices', #NEW
122 { rightname=>'View customers of all agents', global=>1 },
126 # customer package rights
128 'Customer package rights' => [
129 'View customer packages', #NEW
130 'Order customer package',
132 'Modify one-time charge',
133 'Change customer package',
134 'Detach customer package',
135 'Bulk change customer packages',
136 'Edit customer package dates',
137 'Discount customer package', #NEW
138 'Custom discount customer package', #NEW
139 'Customize customer package',
140 'Suspend customer package',
141 'Suspend customer package later',
142 'Unsuspend customer package',
143 'Cancel customer package immediately',
144 'Cancel customer package later',
145 'Un-cancel customer package',
146 'Delay suspension events',
147 'Customize billing during suspension',
148 'Add on-the-fly cancel reason', #NEW
149 'Add on-the-fly suspend reason', #NEW
150 'Edit customer package invoice details', #NEW
151 'Edit customer package comments', #NEW
152 'Qualify service', #NEW
153 'Waive setup fee', #NEW
154 'View appointments', #NEWNEW
156 'View package definition costs', #NEWNEW
157 'Change package start date',
158 'Change package contract end date',
159 'Unmask customer DL',
160 'Unmask customer SSN',
164 # customer service rights
166 'Customer service rights' => [
167 'View customer services', #NEW
168 'Provision customer service',
169 'Bulk provision customer service',
170 'Bulk move customer services', #NEWNEW
171 'Recharge customer service', #NEW
172 'Unprovision customer service',
173 'Change customer service', #NEWNEW
176 'Edit home dir', #NEW
177 'Edit www config', #NEW
178 'Edit domain catchall', #NEW
179 'Edit domain nameservice', #NEW
180 'Manage domain registration',
182 { rightname=>'View/link unlinked services', global=>1 }, #not agent-virtualizable without more work
186 # customer invoice/financial info rights
188 'Customer invoice / financial info rights' => [
190 'Resend invoices', #NEWNEW
191 { rightname=>'Print and mail invoices', desc=>"Print and mail via Freeside's web service", }, ##NEWER than NEWNEWNEW
194 'View customer tax exemptions', #yow
195 'Edit customer tax exemptions', #NEWNEW
196 'Add customer tax adjustment', #new, but no need to phase in
197 'View customer batched payments', #NEW
198 'View customer pending payments', #NEW
199 'Edit customer pending payments', #NEW
200 'View customer billing events', #NEW
201 'View legacy typeset statements', #new, but no need to phase in
205 # customer payment rights
207 'Customer payment rights' => [
209 { rightname=>'Post payment', desc=>'Make check or cash payments.' },
210 { rightname=>'Backdate payment', desc=>'Enable payments to be posted for days other than today.' },
211 'Post check payment',
213 'Post payment batch',
214 'Apply payment', #NEWNEW
215 { rightname=>'Unapply payment', desc=>'Enable "unapplication" of unclosed payments from specific invoices.' }, #aka. unapplypayments
216 { rightname=>'Process payment', desc=>'Process credit card or e-check payments' },
217 'Process credit card payment',
218 'Process Echeck payment',
222 # customer credit rights
224 'Customer credit and refund rights' => [
226 { rightname=>'Backdate credit', desc=>'Enable credits to be posted for days other than today.' },
227 'Credit line items', #NEWNEWNEW
228 'Apply credit', #NEWNEW
229 'Void credit', #NEWER than things marked NEWNEWNEW
230 'Unvoid credit', #NEWER than things marked NEWNEWNEW
231 { rightname=>'Unapply credit', desc=>'Enable "unapplication" of unclosed credits.' }, #aka unapplycredits
233 { rightname=>'Post refund', desc=>'Enable posting of check and cash refunds.' },
236 # { rightname=>'Process refund', desc=>'Enable processing of generic credit card/ACH refunds (i.e. not associated with a specific prior payment).' },
237 { rightname=>'Refund payment', desc=>'Enable refund of existing customer credit card or e-check payments.' },
238 'Refund credit card payment',
239 'Refund Echeck payment',
240 'Delete refund', #NEW
241 'Add on-the-fly credit reason', #NEW
242 'Add on-the-fly void reason',
243 'Add on-the-fly refund reason', #NEW
247 # customer voiding rights..
249 'Customer payment void rights' => [
250 { rightname=>'Credit card void', desc=>'Enable local-only voiding of credit card payments in addition to refunds against the payment gateway.' }, #aka. cc-void
251 { rightname=>'Echeck void', desc=>'Enable local-only voiding of echeck payments in addition to refunds against the payment gateway.' }, #aka. echeck-void
253 { rightname=>'Unvoid payments', desc=>'Enable unvoiding of voided payments' }, #aka. unvoid
259 # note/attachment rights...
261 'Customer note and attachment rights' => [
262 'Add customer note', #NEW
263 'Edit customer note', #NEW
264 'Delete customer note', #NEWEST
265 'View attachments', #NEW
266 'Browse attachments', #NEW
267 'Download attachment', #NEW
268 'Add attachment', #NEW
269 'Edit attachment', #NEW
270 'Delete attachment', #NEW
271 'View deleted attachments', #NEW
272 'Undelete attachment', #NEW
273 'Purge attachment', #NEW
277 # report/listing rights...
279 'Reporting/listing rights' => [
283 'List all customers',
284 'Advanced customer search',
285 'List zip codes', #NEW
289 'Summarize packages',
291 'List service passwords',
293 { rightname=> 'List rating data', desc=>'Usage reports', global=>1 },
294 'Billing event reports',
295 'Receivables report',
296 'Basic payment and refund reports',
298 { rightname=>'Send reports to customers', global=>1 },
299 { rightname=> 'List inventory', global=>1 },
300 { rightname=>'View email logs', global=>1 },
301 { rightname=>'View system logs' },
303 'Download report data',
304 'Customers: Customer churn report',
305 'Services: Accounts',
306 'Services: Accounts: Advanced search',
308 'Services: Certificates',
309 'Services: Mail forwards',
310 'Services: Virtual hosting services',
311 'Services: Wireless broadband services',
312 'Services: Wireless broadband services: Advanced search',
314 'Services: Cable subscribers',
315 'Services: Conferencing',
316 'Services: Dish services',
317 'Services: Hardware',
318 'Services: Hardware: Advanced search',
319 'Services: Phone numbers',
320 'Services: Phone numbers: Advanced search',
323 'Services: Mailing lists',
324 'Services: Alarm services',
326 'Services: Circuits',
328 'Services: Fiber: Advanced search',
329 'Services: External services',
330 'Usage: RADIUS sessions',
331 'Usage: Call Detail Records (CDRs)',
332 'Usage: Unrateable CDRs',
333 'Usage: Time worked',
334 #gone in 4.x as a distinct ACL (for now?) { rightname=>'Employees: Commission Report', global=>1 },
335 { rightname=>'Employees: Audit Report', global=>1 },
337 #{ rightname => 'List customers of all agents', global=>1 },
343 'Miscellaneous rights' => [
344 { rightname=>'Job queue', global=>1 },
345 { rightname=>'Time queue', global=>1 },
346 { rightname=>'Process batches', }, #Process payment batches
347 { rightname=>'Process global batches', global=>1 }, #Process global payment batches
348 { rightname=>'Reprocess batches', global=>1 }, #Reprocess payment batches
349 { rightname=>'Redownload resolved batches', global=>1 }, #Redownload resolved payment batches
350 { rightname=>'Process invoice batches', },
351 { rightname=>'Process global invoice batches', global=>1 },
352 { rightname=>'Import', global=>1 }, #some of these are ag-virt'ed now? give em their own ACLs
353 { rightname=>'Export', global=>1 },
354 { rightname=> 'Edit rating data', desc=>'Delete CDRs', global=>1 },
355 { rightname=>'Delete fees', },
361 #'Database access rights' => [
362 { rightname=>'Raw SQL', global=>1 }, #NEW
365 #'Employee preference rights' => [
366 { rightname=>'Employee preference telephony integration' },
369 #'RT preference rights' => [
370 { rightname=>'RT activity notification' },
376 # setup/config rights
378 'Configuration rights' => [
379 'Edit advertising sources',
380 { rightname=>'Edit global advertising sources', global=>1 },
384 'Edit package definitions',
385 { rightname=>'Edit global package definitions', global=>1 },
386 'Edit package definition costs',
388 'Bulk edit package definitions',
390 'Edit FCC report configuration',
391 { rightname => 'Edit FCC report configuration for all agents', global=>1 },
394 #{ rightname=>'Edit global CDR rates', global=>1, },
396 'Edit fee definitions',
397 { rightname=>'Edit global fee definitions', global=>1 },
399 'Edit billing events',
400 { rightname=>'Edit global billing events', global=>1 },
403 { rightname=>'View global templates', global=>1 },
405 { rightname=>'Edit global templates', global=>1 },
408 { rightname=>'Edit global inventory', global=>1 },
410 { rightname=>'Dialup configuration' },
411 { rightname=>'Dialup global configuration', global=>1 },
413 { rightname=>'Broadband configuration' },
414 { rightname=>'Broadband global configuration', global=>1 },
416 { rightname=>'Alarm configuration' },
417 { rightname=>'Alarm global configuration', global=>1 },
419 { rightname=> 'Configure network monitoring', global=>1 },
421 #{ rightname=>'Edit employees', global=>1, },
422 #{ rightname=>'Edit employee groupss', global=>1, },
424 { rightname=>'Edit custom fields', global=>1 },
426 { rightname=>'Configuration', global=>1 }, #most of the rest of the configuraiton is not agent-virtualized
428 { rightname=>'Configuration download', }, #description of how it affects
429 #search/elements/search.html
441 Returns the full list of right names.
447 map { ref($_) ? $_->{'rightname'} : $_ } map @{ $rights{$_} }, keys %rights;
450 =item default_superuser_rights
452 Most (but not all) right names.
456 sub default_superuser_rights {
458 my %omit = map { $_=>1 } (
460 'Edit customer package dates',
462 'Usage: Time worked',
463 'Redownload resolved batches',
465 'Configuration download',
466 'View customers of all agents',
467 'View/link unlinked services',
471 'Void invoices',#people are overusing this when credits are more appropriate
473 'View legacy typeset statments',
474 'Detach customer package',
478 no warnings 'uninitialized';
479 grep { ! $omit{$_} } $class->rights;
484 Returns a list of key-value pairs suitable for assigning to a hash. Keys are
485 category names and values are list references of rights. Each element of the
486 list reference scalar right name or a hashref with the following keys:
490 =item rightname - Right name
492 =item desc - Extended right description
494 =item global - Global flag, indicates that this access right provides access to global data which is shared among all agents.
508 Damn those infernal six-legged creatures!
512 L<FS::access_right>, L<FS::access_group>, L<FS::access_user>