1 package FS::AccessRight;
4 use vars qw(@rights); # %rights);
9 FS::AccessRight - Access control rights.
17 Access control rights - Permission to perform specific actions that can be
18 assigned to users and/or groups.
24 # '_desc' => 'Access to high-level reporting',
26 # 'Configuration' => [
27 # '_desc' => 'Access to configuration',
32 # '_desc' => 'Master access to reseller configuration',
37 # 'export_svc_pkg' => [
38 # '_desc' => 'Access to export, service and package configuration',
39 # 'part_export' => {},
46 # '_desc' => 'Access to billing configuration',
47 # 'payment_gateway' => {},
48 # 'part_bill_event' => {},
49 # 'prepay_credit' => {},
51 # 'cust_main_county' => {},
55 # '_desc' => 'Access to dialup configuraiton',
56 # 'svc_acct_pop' => {},
60 # '_desc' => 'Access to broadband configuration',
66 # 'part_referral' => {},
67 # 'part_virtual_field' => {},
69 # 'inventory_class' => {},
76 ##turn it into a more hash-like structure, but ordered via IxHash
78 #well, this is what we have for now. could be ordered better, could be lots of
79 # things better, but this ACL system does 99% of what folks need and the UI
82 # okay, well it *really* needs some catgorization in the UI. badly.
86 # basic customer rights
90 #'View Customer | View tickets',
93 'Complimentary customer', #aka users-allow_comp
94 'Delete customer', #aka. deletecustomers #Enable customer deletions. Be very careful! Deleting a customer will remove all traces that this customer ever existed! It should probably only be used when auditing a legacy database. Normally, you cancel all of a customers' packages if they cancel service.
95 'Add customer note', #NEW
96 'Edit customer note', #NEW
97 'Bill customer now', #NEW
98 'Bulk send customer notices', #NEW
101 # customer package rights
103 'View customer packages', #NEW
104 'Order customer package',
106 'Change customer package',
107 'Bulk change customer packages',
108 'Edit customer package dates',
109 'Customize customer package',
110 'Suspend customer package',
111 'Suspend customer package later',
112 'Unsuspend customer package',
113 'Cancel customer package immediately',
114 'Cancel customer package later',
115 'Delay suspension events',
116 'Add on-the-fly cancel reason', #NEW
117 'Add on-the-fly suspend reason', #NEW
118 'Edit customer package invoice details', #NEW
119 'Edit customer package comments', #NEW
122 # customer service rights
125 'Edit home dir', #NEW
126 'Edit www config', #NEW
127 'Edit domain catchall', #NEW
128 'Edit domain nameservice', #NEW
129 'View customer services', #NEW
130 'Provision customer service',
131 'Recharge customer service', #NEW
132 'Unprovision customer service',
133 'Change customer service', #NEWNEW
135 'View/link unlinked services', #not agent-virtualizable without more work
138 # customer invoice/financial info rights
141 'Resend invoices', #NEWNEW
142 'Delete invoices', #new, but no need to phase in
143 'View customer tax exemptions', #yow
144 'View customer batched payments', #NEW
147 # customer payment rights
150 'Post payment batch',
151 'Apply payment', #NEWNEW
152 'Unapply payment', #aka. unapplypayments Enable "unapplication" of unclosed payments.
156 'Delete payment', #aka. deletepayments - Enable deletion of unclosed payments. Be very careful! Only delete payments that were data-entry errors, not adjustments. Optionally specify one or more comma-separated email addresses to be notified when a payment is deleted.
158 'Delete refund', #NEW
161 # customer credit rights
164 'Apply credit', #NEWNEW
165 'Unapply credit', #aka unapplycredits Enable "unapplication" of unclosed credits.
166 'Delete credit', #aka. deletecredits Enable deletion of unclosed credits. Be very careful! Only delete credits that were data-entry errors, not adjustments. Optionally specify one or more comma-separated email addresses to be notified when a credit is deleted.
169 'Add on-the-fly credit reason', #NEW
172 # customer voiding rights..
174 'Credit card void', #aka. cc-void #Enable local-only voiding of echeck payments in addition to refunds against the payment gateway
175 'Echeck void', #aka. echeck-void #Enable local-only voiding of echeck payments in addition to refunds against the payment gateway
177 'Unvoid', #aka. unvoid #Enable unvoiding of voided payments
180 # report/listing rights...
183 'List zip codes', #NEW
188 'List rating data', # 'Usage reports',
189 'Billing event reports',
195 'Job queue', # these are not currently agent-virtualized
196 'Process batches', # NEW
197 'Reprocess batches', # NEW
207 # setup/config rights
209 'Edit advertising sources',
210 'Edit global advertising sources',
212 'Configuration', #most of the rest of the configuraiton is not
220 sub default_superuser_rights {
222 my %omit = map { $_=>1 } (
231 no warnings 'uninitialized';
232 grep { ! $omit{$_} } $class->rights;