hostsharing/hs.hsadmin.ng
6
0
Fork 0
Code Pull Requests 2 Activity

draft for debitor permission grant model (cleanup + with refundBankAccount)

Browse Source
This commit is contained in:
Michael Hoennig 2024-02-07 13:16:59 +01:00
parent 2bae7dee2f
commit 4398299854
1 changed files with 18 additions and 41 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

59
src/main/resources/db/changelog/273-hs-office-debitor-rbac.md
View File

@ -3,44 +3,21 @@
```mermaid
flowchart TB
%%subgraph external[ ]
%% style external fill:#fff
subgraph bank[ ]
style bank fill:#fff
%% subgraph partnerPerson[partnerPerson:anchor]
%% direction TB
%% style partnerPerson fill:#eee
%%
%% role:partnerPerson.owner[partnerPerson.owner]
%% --> role:partnerPerson.admin[partnerPerson.admin]
%% --> role:partnerPerson.referrer[partnerPerson.referrer]
%% end
%% subgraph billingPerson[billingPerson:holder]
%% direction TB
%% style billingPerson fill:#eee
%%
%% role:billingPerson.owner[billingPerson.owner]
%% --> role:billingPerson.admin[billingPerson.admin]
%% --> role:billingPerson.referrer[billingPerson.referrer]
%% end
%% subgraph billingContact[billingContact]
%% direction TB
%% style billingContact fill:#eee
%%
%% role:billingContact.owner[contact.owner]
%% --> role:billingContact.admin[contact.admin]
%% --> role:billingContact.referrer[contact.referrer]
%% end
subgraph refundBankAccount
direction TB
style refundBankAccount fill:#eee
role:refundBankAccount.admin[bankAccount.admin]
role:refundBankAccount.owner[bankAccount.owner]
--> role:refundBankAccount.admin[bankAccount.admin]
--> role:refundBankAccount.referrer[bankAccount.referrer]
end
end
subgraph partner[ ]
style partner fill:#fff
subgraph partnerRelationship[hsOfficeRelationship:PARTNER]
direction TB
@ -54,7 +31,7 @@ flowchart TB
partnerPerson[e.g. partnerPerson.admin] --> role:partnerRelationship.agent
otherPerson[e.g. operationalPerson.admin] --> role:partnerRelationship.tenant
end
%%end
end
subgraph internal[ ]
direction TB
@ -73,31 +50,31 @@ subgraph internal[ ]
subgraph debitor
direction TB
role:debitorRelationship.owner[[debitor.owner]]
role:debitorRelationship.owner[debitorRelationship.owner]
%% permissions
==> perm:debitor.*{{debitor.*}}
role:debitorRelationship.admin[[debitor.admin]]
role:debitorRelationship.admin[debitorRelationship.admin]
%% permissions
==> perm:debitor.edit{{debitor.edit}}
==> perm:debitor.edit{{debitorRelationship.edit}}
%% incoming
role:partnerRelationship.admin ==> role:debitorRelationship.admin
%% outgoing
role:debitorRelationship.admin ==> role:partnerRelationship.agent
role:debitorRelationship.agent[[debitor.agent]]
role:debitorRelationship.agent[debitorRelationship.agent]
%% incoming
role:partnerRelationship.agent ==> role:debitorRelationship.agent
role:refundBankAccount.admin ==> role:debitorRelationship.agent
%% outgoing
role:debitorRelationship.agent ==> role:partnerRelationship.tenant
role:debitorRelationship.agent ==> role:refundBankAccount.referrer
role:debitorRelationship.tenant[[debitor.tenant]]
role:debitorRelationship.tenant[debitorRelationship.tenant]
==> perm:debitor.view{{debitor.view}}
end
end
end
```