draft for partner permission grant model

src/main/resources/db/changelog/233-hs-office-partner-rbac.md

@@ -3,76 +3,69 @@
 ```mermaid
 flowchart TB
 
-subgraph global
+subgraph external[ ]
+    style external fill:#fff
+    
+    subgraph global
         style global fill:#eee
         
         role:global.admin[global.admin]    
-end
+    end
 
-subgraph hsOfficeContact
+    subgraph partnerPerson
+        style partnerPerson fill:#eee
+        
+        role:partnerPerson.admin[global.admin]
+    end
+
+    subgraph otherRelatedPerson
+        style otherRelatedPerson fill:#eee
+        
+        role:otherRelatedPerson.admin[global.admin]
+    end
+
+    subgraph hsOfficeRelationship
         direction TB
-    style hsOfficeContact fill:#eee
+        style hsOfficeRelationship fill:#eee
 
-    role:hsOfficeContact.admin[contact.admin]    
+        role:global.admin
-    --> role:hsOfficeContact.tenant[contact.tenant]    
+        --> role:hsOfficeRelationship.owner[relationship.owner]    
-    --> role:hsOfficeContact.guest[contact.guest]    
+        --> role:hsOfficeRelationship.admin[relationship.admin]    
+        --> role:hsOfficeRelationship.agent[relationship.agent]    
+        --> role:hsOfficeRelationship.tenant[relationship.tenant]
+        
+        role:partnerPerson.admin --> role:hsOfficeRelationship.agent
+        role:otherRelatedPerson.admin --> role:hsOfficeRelationship.tenant
+    end
 end
 
-subgraph hsOfficePerson
+subgraph internal[ ]
-    direction TB
+    style internal fill:#fff
-    style hsOfficePerson fill:#eee
 
-    role:hsOfficePerson.admin[person.admin]    
+    subgraph hsOfficePartner
-    --> role:hsOfficePerson.tenant[person.tenant]    
-    --> role:hsOfficePerson.guest[person.guest]    
-end
         
-subgraph hsOfficePartnerDetails
+        perm:hsOfficePartner.*{{partner.*}}
+        role:hsOfficeRelationship.owner --> perm:hsOfficePartner.*
+        
+        perm:hsOfficePartner.edit{{partner.edit}}
+        role:hsOfficeRelationship.admin --> perm:hsOfficePartner.edit
+        
+        perm:hsOfficePartner.view{{partner.view}}
+        role:hsOfficeRelationship.tenant --> perm:hsOfficePartner.view
+    end
+
+    subgraph hsOfficePartnerDetails
         direction TB
         
-    perm:hsOfficePartnerDetails.*{{partner.*}}
+        perm:hsOfficePartnerDetails.*{{partnerDetails.*}}
-    perm:hsOfficePartnerDetails.edit{{partner.edit}}
+        role:hsOfficeRelationship.owner --> perm:hsOfficePartnerDetails.*
-    perm:hsOfficePartnerDetails.view{{partner.view}}
-end
 
-subgraph hsOfficePartner
+        perm:hsOfficePartnerDetails.edit{{partnerDetails.edit}}
+        role:hsOfficeRelationship.agent --> perm:hsOfficePartnerDetails.edit
+        role:hsOfficeRelationship.agent ----> perm:hsOfficePartnerDetails.view
         
-   role:hsOfficePartner.owner[partner.owner]
+        perm:hsOfficePartnerDetails.view{{partnerDetails.view}}
-   %% permissions
+    end
-       role:hsOfficePartner.owner --> perm:hsOfficePartner.*{{partner.*}}
-       role:hsOfficePartner.owner --> perm:hsOfficePartnerDetails.*{{partner.*}}
-   %% incoming
-       role:global.admin ---> role:hsOfficePartner.owner
 
-   role:hsOfficePartner.admin[partner.admin]
-   %% permissions
-       role:hsOfficePartner.admin --> perm:hsOfficePartner.edit{{partner.edit}}
-       role:hsOfficePartner.admin --> perm:hsOfficePartnerDetails.edit{{partner.edit}}
-   %% incoming
-       role:hsOfficePartner.owner ---> role:hsOfficePartner.admin
-   %% outgoing
-       role:hsOfficePartner.admin --> role:hsOfficePerson.tenant
-       role:hsOfficePartner.admin --> role:hsOfficeContact.tenant
-  
-   role:hsOfficePartner.agent[partner.agent]
-   %% permissions
-       role:hsOfficePartner.agent --> perm:hsOfficePartnerDetails.view{{partner.view}}
-   %% incoming
-       role:hsOfficePartner.admin ---> role:hsOfficePartner.agent
-       role:hsOfficePerson.admin --> role:hsOfficePartner.agent
-       role:hsOfficeContact.admin --> role:hsOfficePartner.agent
-  
-   role:hsOfficePartner.tenant[partner.tenant]
-   %% incoming
-       role:hsOfficePartner.agent --> role:hsOfficePartner.tenant
-   %% outgoing   
-       role:hsOfficePartner.tenant --> role:hsOfficePerson.guest
-       role:hsOfficePartner.tenant --> role:hsOfficeContact.guest
-
-   role:hsOfficePartner.guest[partner.guest]
-   %% permissions
-       role:hsOfficePartner.guest -->  perm:hsOfficePartner.view{{partner.view}}
-   %% incoming
-       role:hsOfficePartner.tenant --> role:hsOfficePartner.guest
 end
 ```