X-Git-Url: http://git.freeside.biz/gitweb/?a=blobdiff_plain;f=FS%2FFS%2FAccessRight.pm;h=cc0bf7ff67ff4299b1dd047aaed643c5df5cee56;hb=590603ecaea3184f64530755a76626be8205da49;hp=5229e1e65d756f70e44c1f20dde3250a8faec1fd;hpb=c738a3c4923774b64960aa87fa58bd0751487edb;p=freeside.git

diff --git a/FS/FS/AccessRight.pm b/FS/FS/AccessRight.pm
index 5229e1e65..cc0bf7ff6 100644
--- a/FS/FS/AccessRight.pm
+++ b/FS/FS/AccessRight.pm
@@ -78,32 +78,119 @@ assigned to users and/or groups.
 #well, this is what we have for now.  could be ordered better, could be lots of
 # things better, but this ACL system does 99% of what folks need and the UI
 # isn't *that* bad
+# 
+# okay, well it *really* needs some catgorization in the UI.  badly.
 @rights = (
+
+##
+# basic customer rights
+##
   'New customer',
   'View customer',
   #'View Customer | View tickets',
   'Edit customer',
   'Cancel customer',
-  'Delete customer',
-
+  'Complimentary customer', #aka users-allow_comp 
+  'Delete customer', #aka. deletecustomers #Enable customer deletions. Be very careful! Deleting a customer will remove all traces that this customer ever existed! It should probably only be used when auditing a legacy database. Normally, you cancel all of a customers' packages if they cancel service.
+  'Add customer note',
+  'Edit customer note',
+
+###
+# customer package rights
+###
   'Order customer package',
+  'One-time charge',
   'Change customer package',
+  'Bulk change customer packages',
   'Edit customer package dates',
   'Customize customer package',
   'Suspend customer package',
   'Unsuspend customer package',
   'Cancel customer package immediately',
   'Cancel customer package later',
-
-  'Provision service',
-  'Unprovision service',
-  #legacy link stuff
-
+  'Add on-the-fly cancel reason',
+  'Add on-the-fly suspend reason',
+
+###
+# customer service rights
+###
+  'Edit usage',
+  'Provision customer service',
+  'Recharge customer service',
+  'Unprovision customer service',
+
+  'View/link unlinked services', #not agent-virtualizable without more work
+
+###
+# customer invoice/financial info rights
+###
+  'View invoices',
+  'View customer tax exemptions', #yow
+
+###
+# customer payment rights
+###
   'Post payment',
+  'Post payment batch',
+  'Unapply payment', #aka. unapplypayments Enable "unapplication" of unclosed payments.
   'Process payment',
-  'Post credit',
-  #more financial stuff
+  'Refund payment',
+
+  'Delete payment', #aka. deletepayments - Enable deletion of unclosed payments. Be very careful! Only delete payments that were data-entry errors, not adjustments. Optionally specify one or more comma-separated email addresses to be notified when a payment is deleted.
 
+  'Delete refund',
+
+###
+# customer credit rights
+###
+  'Post credit',
+  #'Apply credit',
+  'Unapply credit', #aka unapplycredits Enable "unapplication" of unclosed credits.
+  'Delete credit', #aka. deletecredits Enable deletion of unclosed credits. Be very careful! Only delete credits that were data-entry errors, not adjustments. Optionally specify one or more comma-separated email addresses to be notified when a credit is deleted.
+
+###
+# customer voiding rights..
+###
+  'Credit card void', #aka. cc-void #Enable local-only voiding of echeck payments in addition to refunds against the payment gateway
+  'Echeck void', #aka. echeck-void #Enable local-only voiding of echeck payments in addition to refunds against the payment gateway
+  'Regular void',
+  'Unvoid', #aka. unvoid #Enable unvoiding of voided payments
+
+###
+# report/listing rights...
+###
+  'List customers',
+  'List zip codes',
+  'List invoices',
+  'List packages',
+  'List services',
+
+  'List rating data',  # 'Usage reports',
+  'Billing event reports',
+  'Financial reports',
+
+###
+# misc rights
+###
+  'Job queue',         # these are not currently agent-virtualized
+  'Process batches',   #
+  'Reprocess batches', #
+  'Import',            #
+  'Export',            #
+
+###
+# misc misc rights
+###
+  'Raw SQL',
+
+###
+# setup/config rights
+###
+  'Edit advertising sources',
+  'Edit global advertising sources',
+
+  'Configuration', #most of the rest of the configuraiton is not
+                   # agent-virtualized
 );
 
 sub rights {