hs.hsadmin.ng/src/main/resources/db/changelog/223-hs-office-relationship-rbac.md
Michael Hoennig 187c0db8e2 RBAC Diagram+PostgreSQL Generator and view->SELECT etc. refactoring (#21)
Co-authored-by: Michael Hoennig <michael@hoennig.de>
Reviewed-on: #21
Reviewed-by: Timotheus Pokorra <timotheus.pokorra@hostsharing.net>
2024-03-11 12:30:43 +01:00

1.0 KiB

hs_office_relationship RBAC


flowchart TB

subgraph global
    style global fill:#eee
    
    role:global.admin[global.admin]    
end

subgraph hsOfficeContact
    direction TB
    style hsOfficeContact fill:#eee
    
    role:hsOfficeContact.admin[contact.admin]    
    --> role:hsOfficeContact.tenant[contact.tenant]    
    --> role:hsOfficeContact.guest[contact.guest]    
end

subgraph hsOfficePerson
    direction TB
    style hsOfficePerson fill:#eee
    
    role:hsOfficePerson.admin[person.admin]    
    --> role:hsOfficePerson.tenant[person.tenant]    
    --> role:hsOfficePerson.guest[person.guest]    
end

subgraph hsOfficeRelationship

    role:hsOfficePerson#relAnchor.admin[person#anchor.admin]
    --- role:hsOfficePerson.admin
       
   role:hsOfficeRelationship.owner[relationship.owner]
   %% permissions
       role:hsOfficeRelationship.owner --> perm:hsOfficeRelationship.*{{relationship.*}}
   %% incoming
       role:global.admin ---> role:hsOfficeRelationship.owner
       role:hsOfficePersonAdmin#relAnchor.admin
end