1 package FS::AccessRight;
4 use vars qw(@rights); # %rights);
9 FS::AccessRight - Access control rights.
15 my @rights = FS::AccessRight->rights;
17 #my %rights = FS::AccessRight->rights_categorized;
18 tie my %rights, 'Tie::IxHash', FS::AccessRight->rights_categorized;
19 foreach my $category ( keys %rights ) {
20 my @category_rights = @{ $rights{$category} };
25 Access control rights - Permission to perform specific actions that can be
26 assigned to users and/or groups.
32 # '_desc' => 'Access to high-level reporting',
34 # 'Configuration' => [
35 # '_desc' => 'Access to configuration',
40 # '_desc' => 'Master access to reseller configuration',
45 # 'export_svc_pkg' => [
46 # '_desc' => 'Access to export, service and package configuration',
47 # 'part_export' => {},
54 # '_desc' => 'Access to billing configuration',
55 # 'payment_gateway' => {},
56 # 'part_bill_event' => {},
57 # 'prepay_credit' => {},
59 # 'cust_main_county' => {},
63 # '_desc' => 'Access to dialup configuraiton',
64 # 'svc_acct_pop' => {},
68 # '_desc' => 'Access to broadband configuration',
74 # 'part_referral' => {},
75 # 'part_virtual_field' => {},
77 # 'inventory_class' => {},
84 ##turn it into a more hash-like structure, but ordered via IxHash
86 #well, this is what we have for now. getting better.
87 tie my %rights, 'Tie::IxHash',
92 'Contact and Prospect rights' => [
99 #'View customer contacts',
101 'Generate quotation',
105 # basic customer rights
107 'Customer rights' => [
110 #'View Customer | View tickets',
112 'Edit customer tags',
113 'Edit referring customer',
114 'View customer history',
116 'Unsuspend customer',
118 'Complimentary customer', #aka users-allow_comp
120 'Merge customer across agents',
121 { rightname=>'Delete customer', desc=>"Enable customer deletions. Be very careful! Deleting a customer will remove all traces that this customer ever existed! It should probably only be used when auditing a legacy database. Normally, you cancel all of a customer's packages if they cancel service." }, #aka. deletecustomers
122 'Bill customer now', #NEW
123 'Bulk send customer notices', #NEW
124 { rightname=>'View customers of all agents', global=>1 },
128 # customer package rights
130 'Customer package rights' => [
131 'View customer packages', #NEW
132 'Order customer package',
134 'Change customer package',
135 'Bulk change customer packages',
136 'Edit customer package dates',
137 'Discount customer package', #NEW
138 'Custom discount customer package', #NEW
139 'Customize customer package',
140 'Suspend customer package',
141 'Suspend customer package later',
142 'Unsuspend customer package',
143 'Cancel customer package immediately',
144 'Cancel customer package later',
145 'Un-cancel customer package',
146 'Delay suspension events',
147 'Add on-the-fly cancel reason', #NEW
148 'Add on-the-fly suspend reason', #NEW
149 'Edit customer package invoice details', #NEW
150 'Edit customer package comments', #NEW
151 'Qualify service', #NEW
152 'Waive setup fee', #NEW
156 # customer service rights
158 'Customer service rights' => [
159 'View customer services', #NEW
160 'Provision customer service',
161 'Bulk provision customer service',
162 'Recharge customer service', #NEW
163 'Unprovision customer service',
164 'Change customer service', #NEWNEW
166 'Edit home dir', #NEW
167 'Edit www config', #NEW
168 'Edit domain catchall', #NEW
169 'Edit domain nameservice', #NEW
170 'Manage domain registration',
172 { rightname=>'View/link unlinked services', global=>1 }, #not agent-virtualizable without more work
176 # customer invoice/financial info rights
178 'Customer invoice / financial info rights' => [
180 'Resend invoices', #NEWNEW
184 'View customer tax exemptions', #yow
185 'Add customer tax adjustment', #new, but no need to phase in
186 'View customer batched payments', #NEW
187 'View customer pending payments', #NEW
188 'Edit customer pending payments', #NEW
189 'View customer billing events', #NEW
193 # customer payment rights
195 'Customer payment rights' => [
197 { rightname=>'Post payment', desc=>'Make check or cash payments.' },
198 { rightname=>'Backdate payment', desc=>'Enable payments to be posted for days other than today.' },
199 'Post check payment',
201 'Post payment batch',
202 'Apply payment', #NEWNEW
203 { rightname=>'Unapply payment', desc=>'Enable "unapplication" of unclosed payments from specific invoices.' }, #aka. unapplypayments
204 { rightname=>'Process payment', desc=>'Process credit card or e-check payments' },
205 'Process credit card payment',
206 'Process Echeck payment',
207 { rightname=>'Delete payment', desc=>'Enable deletion of unclosed payments. Be very careful! Only delete payments that were data-entry errors, not adjustments.' }, #aka. deletepayments Optionally specify one or more comma-separated email addresses to be notified when a payment is deleted.
211 # customer credit rights
213 'Customer credit and refund rights' => [
215 'Apply credit', #NEWNEW
216 { rightname=>'Unapply credit', desc=>'Enable "unapplication" of unclosed credits.' }, #aka unapplycredits
217 { rightname=>'Delete credit', desc=>'Enable deletion of unclosed credits. Be very careful! Only delete credits that were data-entry errors, not adjustments.' }, #aka. deletecredits Optionally specify one or more comma-separated email addresses to be notified when a credit is deleted.
219 { rightname=>'Post refund', desc=>'Enable posting of check and cash refunds.' },
222 # { rightname=>'Process refund', desc=>'Enable processing of generic credit card/ACH refunds (i.e. not associated with a specific prior payment).' },
223 { rightname=>'Refund payment', desc=>'Enable refund of existing customer credit card or e-check payments.' },
224 'Refund credit card payment',
225 'Refund Echeck payment',
226 'Delete refund', #NEW
227 'Add on-the-fly credit reason', #NEW
231 # customer voiding rights..
233 'Customer payment void rights' => [
234 { rightname=>'Credit card void', desc=>'Enable local-only voiding of echeck payments in addition to refunds against the payment gateway.' }, #aka. cc-void
235 { rightname=>'Echeck void', desc=>'Enable local-only voiding of echeck payments in addition to refunds against the payment gateway.' }, #aka. echeck-void
237 { rightname=>'Unvoid payments', desc=>'Enable unvoiding of voided payments' }, #aka. unvoid
243 # note/attachment rights...
245 'Customer note and attachment rights' => [
246 'Add customer note', #NEW
247 'Edit customer note', #NEW
248 'View attachments', #NEW
249 'Browse attachments', #NEW
250 'Download attachment', #NEW
251 'Add attachment', #NEW
252 'Edit attachment', #NEW
253 'Delete attachment', #NEW
254 'View deleted attachments', #NEW
255 'Undelete attachment', #NEW
256 'Purge attachment', #NEW
260 # report/listing rights...
262 'Reporting/listing rights' => [
264 'List all customers',
265 'Advanced customer search',
266 'List zip codes', #NEW
270 'Summarize packages',
272 'List service passwords',
274 { rightname=> 'List rating data', desc=>'Usage reports', global=>1 },
275 'Billing event reports',
276 'Receivables report',
278 { rightname=> 'List inventory', global=>1 },
279 { rightname=>'View email logs', global=>1 },
280 { rightname=>'View system logs' },
282 'Download report data',
283 'Services: Accounts',
284 'Services: Accounts: Advanced search',
286 'Services: Certificates',
287 'Services: Mail forwards',
288 'Services: Virtual hosting services',
289 'Services: Wireless broadband services',
290 'Services: Wireless broadband services: Advanced search',
292 'Services: Dish services',
293 'Services: Hardware',
294 'Services: Hardware: Advanced search',
295 'Services: Phone numbers',
298 'Services: Mailing lists',
299 'Services: External services',
300 'Usage: RADIUS sessions',
301 'Usage: Call Detail Records (CDRs)',
302 'Usage: Unrateable CDRs',
303 'Usage: Time worked',
305 #{ rightname => 'List customers of all agents', global=>1 },
311 'Miscellaneous rights' => [
312 { rightname=>'Job queue', global=>1 },
313 { rightname=>'Time queue', global=>1 },
314 { rightname=>'Process batches', }, #Process payment batches
315 { rightname=>'Process global batches', global=>1 }, #Process global payment batches
316 { rightname=>'Reprocess batches', global=>1 }, #Reprocess payment batches
317 { rightname=>'Redownload resolved batches', global=>1 }, #Redownload resolved payment batches
318 { rightname=>'Process invoice batches', },
319 { rightname=>'Process global invoice batches', global=>1 },
320 { rightname=>'Import', global=>1 }, #some of these are ag-virt'ed now? give em their own ACLs
321 { rightname=>'Export', global=>1 },
322 { rightname=> 'Edit rating data', desc=>'Delete CDRs', global=>1 },
328 #'Database access rights' => [
329 { rightname=>'Raw SQL', global=>1 }, #NEW
333 # setup/config rights
335 'Configuration rights' => [
336 'Edit advertising sources',
337 { rightname=>'Edit global advertising sources', global=>1 },
339 'Edit package definitions',
340 { rightname=>'Edit global package definitions', global=>1 },
342 'Edit billing events',
343 { rightname=>'Edit global billing events', global=>1 },
346 { rightname=>'View global templates', global=>1 },
348 { rightname=>'Edit global templates', global=>1 },
351 { rightname=>'Edit global inventory', global=>1 },
353 { rightname=>'Dialup configuration' },
354 { rightname=>'Dialup global configuration', global=>1 },
356 { rightname=>'Broadband configuration' },
357 { rightname=>'Broadband global configuration', global=>1 },
359 { rightname=> 'Configure network monitoring', global=>1 },
361 #{ rightname=>'Edit employees', global=>1, },
362 #{ rightname=>'Edit employee groupss', global=>1, },
364 { rightname=>'Configuration', global=>1 }, #most of the rest of the configuraiton is not agent-virtualized
366 { rightname=>'Configuration download', }, #description of how it affects
367 #search/elements/search.html
379 Returns the full list of right names.
385 map { ref($_) ? $_->{'rightname'} : $_ } map @{ $rights{$_} }, keys %rights;
388 =item default_superuser_rights
390 Most (but not all) right names.
394 sub default_superuser_rights {
396 my %omit = map { $_=>1 } (
402 'Edit customer package dates',
404 'Usage: Time worked',
405 'Redownload resolved batches',
407 'Configuration download',
408 'View customers of all agents',
409 'View/link unlinked services',
413 'Edit customer package dates',
416 no warnings 'uninitialized';
417 grep { ! $omit{$_} } $class->rights;
422 Returns a list of key-value pairs suitable for assigning to a hash. Keys are
423 category names and values are list references of rights. Each element of the
424 list reference scalar right name or a hashref with the following keys:
428 =item rightname - Right name
430 =item desc - Extended right description
432 =item global - Global flag, indicates that this access right provides access to global data which is shared among all agents.
446 Damn those infernal six-legged creatures!
450 L<FS::access_right>, L<FS::access_group>, L<FS::access_user>