#well, this is what we have for now. getting better.
tie my %rights, 'Tie::IxHash',
+
+ ###
+ # contact rights
+ ###
+ 'Contact and Prospect rights' => [
+ 'New prospect',
+ 'View prospect',
+ 'Edit prospect',
+ 'List prospects',
+ 'Edit contact', #!
+ #'New contact',
+ #'View customer contacts',
+ #'List contacts',
+ ],
###
# basic customer rights
'View customer',
#'View Customer | View tickets',
'Edit customer',
+ 'Edit customer tags',
+ 'Edit referring customer',
+ 'View customer history',
'Cancel customer',
'Complimentary customer', #aka users-allow_comp
+ 'Merge customer',
{ rightname=>'Delete customer', desc=>"Enable customer deletions. Be very careful! Deleting a customer will remove all traces that this customer ever existed! It should probably only be used when auditing a legacy database. Normally, you cancel all of a customer's packages if they cancel service." }, #aka. deletecustomers
- 'Add customer note', #NEW
- 'Edit customer note', #NEW
'Bill customer now', #NEW
'Bulk send customer notices', #NEW
+ { rightname=>'View customers of all agents', global=>1 },
],
###
'Change customer package',
'Bulk change customer packages',
'Edit customer package dates',
+ 'Discount customer package', #NEW
+ 'Custom discount customer package', #NEW
'Customize customer package',
'Suspend customer package',
'Suspend customer package later',
'Add on-the-fly suspend reason', #NEW
'Edit customer package invoice details', #NEW
'Edit customer package comments', #NEW
+ 'Qualify service', #NEW
+ 'Waive setup fee', #NEW
],
###
'Customer service rights' => [
'View customer services', #NEW
'Provision customer service',
+ 'Bulk provision customer service',
'Recharge customer service', #NEW
'Unprovision customer service',
'Change customer service', #NEWNEW
'Edit www config', #NEW
'Edit domain catchall', #NEW
'Edit domain nameservice', #NEW
+ 'Manage domain registration',
{ rightname=>'View/link unlinked services', global=>1 }, #not agent-virtualizable without more work
],
'Customer invoice / financial info rights' => [
'View invoices',
'Resend invoices', #NEWNEW
+ 'Delete invoices', #new, but no need to phase in
'View customer tax exemptions', #yow
+ 'Add customer tax adjustment', #new, but no need to phase in
'View customer batched payments', #NEW
'View customer pending payments', #NEW
'Edit customer pending payments', #NEW
# customer payment rights
###
'Customer payment rights' => [
- 'Post payment',
+ 'View payments',
+ { rightname=>'Post payment', desc=>'Make check or cash payments.' },
+ 'Post check payment',
+ 'Post cash payment',
'Post payment batch',
'Apply payment', #NEWNEW
{ rightname=>'Unapply payment', desc=>'Enable "unapplication" of unclosed payments from specific invoices.' }, #aka. unapplypayments
- 'Process payment',
- { rightname=>'Refund payment', desc=>'Enable refund of existing customer payments.' },
-
+ { rightname=>'Process payment', desc=>'Process credit card or e-check payments' },
+ 'Process credit card payment',
+ 'Process Echeck payment',
{ rightname=>'Delete payment', desc=>'Enable deletion of unclosed payments. Be very careful! Only delete payments that were data-entry errors, not adjustments.' }, #aka. deletepayments Optionally specify one or more comma-separated email addresses to be notified when a payment is deleted.
-
],
###
'Apply credit', #NEWNEW
{ rightname=>'Unapply credit', desc=>'Enable "unapplication" of unclosed credits.' }, #aka unapplycredits
{ rightname=>'Delete credit', desc=>'Enable deletion of unclosed credits. Be very careful! Only delete credits that were data-entry errors, not adjustments.' }, #aka. deletecredits Optionally specify one or more comma-separated email addresses to be notified when a credit is deleted.
+ 'View refunds',
{ rightname=>'Post refund', desc=>'Enable posting of check and cash refunds.' },
+ 'Post check refund',
+ 'Post cash refund',
# { rightname=>'Process refund', desc=>'Enable processing of generic credit card/ACH refunds (i.e. not associated with a specific prior payment).' },
+ { rightname=>'Refund payment', desc=>'Enable refund of existing customer credit card or e-check payments.' },
+ 'Refund credit card payment',
+ 'Refund Echeck payment',
'Delete refund', #NEW
'Add on-the-fly credit reason', #NEW
],
],
+
+ ###
+ # note/attachment rights...
+ ###
+ 'Customer note and attachment rights' => [
+ 'Add customer note', #NEW
+ 'Edit customer note', #NEW
+ 'View attachments', #NEW
+ 'Browse attachments', #NEW
+ 'Download attachment', #NEW
+ 'Add attachment', #NEW
+ 'Edit attachment', #NEW
+ 'Delete attachment', #NEW
+ 'View deleted attachments', #NEW
+ 'Undelete attachment', #NEW
+ 'Purge attachment', #NEW
+ ],
###
# report/listing rights...
'List invoices',
'List packages',
'List services',
+ 'List service passwords',
{ rightname=> 'List rating data', desc=>'Usage reports', global=>1 },
'Billing event reports',
+ 'Receivables report',
'Financial reports',
+ { rightname=> 'List inventory', global=>1 },
+ { rightname=>'View email logs', global=>1 },
+
+ #{ rightname => 'List customers of all agents', global=>1 },
],
###
'Miscellaneous rights' => [
{ rightname=>'Job queue', global=>1 },
{ rightname=>'Time queue', global=>1 },
- { rightname=>'Process batches', global=>1 },
- { rightname=>'Reprocess batches', global=>1 },
- { rightname=>'Redownload resolved batches', global=>1 },
+ { rightname=>'Process batches', }, #Process payment batches
+ { rightname=>'Process global batches', global=>1 }, #Process global payment batches
+ { rightname=>'Reprocess batches', global=>1 }, #Reprocess payment batches
+ { rightname=>'Redownload resolved batches', global=>1 }, #Redownload resolved payment batches
+ { rightname=>'Process invoice batches', },
+ { rightname=>'Process global invoice batches', global=>1 },
{ rightname=>'Import', global=>1 }, #some of these are ag-virt'ed now? give em their own ACLs
{ rightname=>'Export', global=>1 },
{ rightname=> 'Edit rating data', desc=>'Delete CDRs', global=>1 },
'Edit billing events',
{ rightname=>'Edit global billing events', global=>1 },
+
+ 'Edit templates',
+ { rightname=>'Edit global templates', global=>1 },
+
+ 'Edit inventory',
+ { rightname=>'Edit global inventory', global=>1 },
{ rightname=>'Dialup configuration' },
{ rightname=>'Dialup global configuration', global=>1 },
{ rightname=>'Broadband configuration' },
{ rightname=>'Broadband global configuration', global=>1 },
+
+ { rightname=> 'Configure network monitoring', global=>1 },
+
+ #{ rightname=>'Edit employees', global=>1, },
+ #{ rightname=>'Edit employee groupss', global=>1, },
{ rightname=>'Configuration', global=>1 }, #most of the rest of the configuraiton is not agent-virtualized
=item rights
-Returns a list of right names.
+Returns the full list of right names.
=cut
- sub rights {
+sub rights {
#my $class = shift;
map { ref($_) ? $_->{'rightname'} : $_ } map @{ $rights{$_} }, keys %rights;
- }
+}
+
+=item default_superuser_rights
+
+Most (but not all) right names.
+
+=cut
+
+sub default_superuser_rights {
+ my $class = shift;
+ my %omit = map { $_=>1 } (
+ 'Delete customer',
+ 'Delete invoices',
+ 'Delete payment',
+ 'Delete credit', #?
+ 'Delete refund', #?
+ 'Time queue',
+ 'Redownload resolved batches',
+ 'Raw SQL',
+ 'Configuration download',
+ 'View customers of all agents',
+ 'View/link unlinked services',
+ 'Edit usage',
+ 'Credit card void',
+ 'Echeck void',
+ );
+
+ no warnings 'uninitialized';
+ grep { ! $omit{$_} } $class->rights;
+}
=item rights_info
projects / freeside.git / blobdiff