X-Git-Url: http://git.freeside.biz/gitweb/?a=blobdiff_plain;f=FS%2FFS%2FAccessRight.pm;h=8ba78d5b13e264a03a4b3c6fddb981f335609d7b;hb=dbb388836b7951a3db49deda05a1ff9ba5125c17;hp=f04779a07a37762a59a804796d7ec31652880e58;hpb=41a6a1b1811e337be2fca47504ff9687b6b46cf8;p=freeside.git

diff --git a/FS/FS/AccessRight.pm b/FS/FS/AccessRight.pm
index f04779a07..8ba78d5b1 100644
--- a/FS/FS/AccessRight.pm
+++ b/FS/FS/AccessRight.pm
@@ -78,7 +78,13 @@ assigned to users and/or groups.
 #well, this is what we have for now.  could be ordered better, could be lots of
 # things better, but this ACL system does 99% of what folks need and the UI
 # isn't *that* bad
+# 
+# okay, well it *really* needs some catgorization in the UI.  badly.
 @rights = (
+
+##
+# basic customer rights
+##
   'New customer',
   'View customer',
   #'View Customer | View tickets',
@@ -86,7 +92,12 @@ assigned to users and/or groups.
   'Cancel customer',
   'Complimentary customer', #aka users-allow_comp 
   'Delete customer', #aka. deletecustomers #Enable customer deletions. Be very careful! Deleting a customer will remove all traces that this customer ever existed! It should probably only be used when auditing a legacy database. Normally, you cancel all of a customers' packages if they cancel service.
+  'Add customer note',
+  'Edit customer note',
 
+###
+# customer package rights
+###
   'Order customer package',
   'One-time charge',
   'Change customer package',
@@ -97,14 +108,27 @@ assigned to users and/or groups.
   'Unsuspend customer package',
   'Cancel customer package immediately',
   'Cancel customer package later',
+  'Add on-the-fly cancel reason',
+  'Add on-the-fly suspend reason',
 
+###
+# customer service rights
+###
   'Provision customer service',
+  'Recharge customer service',
   'Unprovision customer service',
 
   'View/link unlinked services', #not agent-virtualizable without more work
 
+###
+# customer invoice/financial info rights
+###
   'View invoices',
+  'View customer tax exemptions', #yow
 
+###
+# customer payment rights
+###
   'Post payment',
   'Post payment batch',
   'Unapply payment', #aka. unapplypayments Enable "unapplication" of unclosed payments.
@@ -113,29 +137,52 @@ assigned to users and/or groups.
 
   'Delete payment', #aka. deletepayments - Enable deletion of unclosed payments. Be very careful! Only delete payments that were data-entry errors, not adjustments. Optionally specify one or more comma-separated email addresses to be notified when a payment is deleted.
 
+###
+# customer credit rights
+###
   'Post credit',
   #'Apply credit',
   'Unapply credit', #aka unapplycredits Enable "unapplication" of unclosed credits.
   'Delete credit', #aka. deletecredits Enable deletion of unclosed credits. Be very careful! Only delete credits that were data-entry errors, not adjustments. Optionally specify one or more comma-separated email addresses to be notified when a credit is deleted.
 
+###
+# customer voiding rights..
+###
   'Credit card void', #aka. cc-void #Enable local-only voiding of echeck payments in addition to refunds against the payment gateway
   'Echeck void', #aka. echeck-void #Enable local-only voiding of echeck payments in addition to refunds against the payment gateway
+  'Regular void',
   'Unvoid', #aka. unvoid #Enable unvoiding of voided payments
 
+###
+# report/listing rights...
+###
   'List customers',
   #'List zip codes',
   'List invoices',
   'List packages',
   'List services',
 
+  'List rating data',  # 'Usage reports',
+  'Billing event reports',
   'Financial reports',
 
-  'Job queue', # these are not currently agent-virtualized
-  'Import',    #
-  'Export',    #
-
-  'Configuration', #none of the configuraiton is agent-virtualized either
-
+###
+# misc rights
+###
+  'Job queue',         # these are not currently agent-virtualized
+  'Process batches',   #
+  'Reprocess batches', #
+  'Import',            #
+  'Export',            #
+
+###
+# setup/config rights
+###
+  'Edit advertising sources',
+  'Edit global advertising sources',
+
+  'Configuration', #most of the rest of the configuraiton is not
+                   # agent-virtualized
 );
 
 sub rights {