hostsharing/hs.hsadmin.ng
6
0
Fork 0
Code Pull Requests 2 Activity

draft for debitor permission grant model (cleanup + with refundBankAccount)

Browse Source
This commit is contained in:
Michael Hoennig 2024-02-07 13:16:59 +01:00
parent 2bae7dee2f
commit 4398299854
1 changed files with 18 additions and 41 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

59
src/main/resources/db/changelog/273-hs-office-debitor-rbac.md
View File

@ -3,44 +3,21 @@
```mermaid ```mermaid
flowchart TB flowchart TB
%%subgraph external[ ] subgraph bank[ ]
%% style external fill:#fff style bank fill:#fff
%% subgraph partnerPerson[partnerPerson:anchor]
%% direction TB
%% style partnerPerson fill:#eee
%%
%% role:partnerPerson.owner[partnerPerson.owner]
%% --> role:partnerPerson.admin[partnerPerson.admin]
%% --> role:partnerPerson.referrer[partnerPerson.referrer]
%% end
%% subgraph billingPerson[billingPerson:holder]
%% direction TB
%% style billingPerson fill:#eee
%%
%% role:billingPerson.owner[billingPerson.owner]
%% --> role:billingPerson.admin[billingPerson.admin]
%% --> role:billingPerson.referrer[billingPerson.referrer]
%% end
%% subgraph billingContact[billingContact]
%% direction TB
%% style billingContact fill:#eee
%%
%% role:billingContact.owner[contact.owner]
%% --> role:billingContact.admin[contact.admin]
%% --> role:billingContact.referrer[contact.referrer]
%% end
subgraph refundBankAccount subgraph refundBankAccount
direction TB direction TB
style refundBankAccount fill:#eee style refundBankAccount fill:#eee
role:refundBankAccount.admin[bankAccount.admin] role:refundBankAccount.owner[bankAccount.owner]
--> role:refundBankAccount.admin[bankAccount.admin]
--> role:refundBankAccount.referrer[bankAccount.referrer] --> role:refundBankAccount.referrer[bankAccount.referrer]
end end
end
subgraph partner[ ]
style partner fill:#fff
subgraph partnerRelationship[hsOfficeRelationship:PARTNER] subgraph partnerRelationship[hsOfficeRelationship:PARTNER]
direction TB direction TB
@ -54,7 +31,7 @@ flowchart TB
partnerPerson[e.g. partnerPerson.admin] --> role:partnerRelationship.agent partnerPerson[e.g. partnerPerson.admin] --> role:partnerRelationship.agent
otherPerson[e.g. operationalPerson.admin] --> role:partnerRelationship.tenant otherPerson[e.g. operationalPerson.admin] --> role:partnerRelationship.tenant
end end
%%end end
subgraph internal[ ] subgraph internal[ ]
direction TB direction TB
@ -73,31 +50,31 @@ subgraph internal[ ]
subgraph debitor subgraph debitor
direction TB direction TB
role:debitorRelationship.owner[[debitor.owner]] role:debitorRelationship.owner[debitorRelationship.owner]
%% permissions %% permissions
==> perm:debitor.*{{debitor.*}} ==> perm:debitor.*{{debitor.*}}
role:debitorRelationship.admin[[debitor.admin]] role:debitorRelationship.admin[debitorRelationship.admin]
%% permissions %% permissions
==> perm:debitor.edit{{debitor.edit}} ==> perm:debitor.edit{{debitorRelationship.edit}}
%% incoming %% incoming
role:partnerRelationship.admin ==> role:debitorRelationship.admin role:partnerRelationship.admin ==> role:debitorRelationship.admin
%% outgoing %% outgoing
role:debitorRelationship.admin ==> role:partnerRelationship.agent role:debitorRelationship.admin ==> role:partnerRelationship.agent
role:debitorRelationship.agent[[debitor.agent]] role:debitorRelationship.agent[debitorRelationship.agent]
%% incoming %% incoming
role:partnerRelationship.agent ==> role:debitorRelationship.agent role:partnerRelationship.agent ==> role:debitorRelationship.agent
role:refundBankAccount.admin ==> role:debitorRelationship.agent
%% outgoing %% outgoing
role:debitorRelationship.agent ==> role:partnerRelationship.tenant role:debitorRelationship.agent ==> role:partnerRelationship.tenant
role:debitorRelationship.agent ==> role:refundBankAccount.referrer
role:debitorRelationship.tenant[[debitor.tenant]] role:debitorRelationship.tenant[debitorRelationship.tenant]
==> perm:debitor.view{{debitor.view}} ==> perm:debitor.view{{debitor.view}}
end end
end end
``` ```