dodil/erp-brick-ar
DODIL ERP brick: accounts receivable
tests/scenarios/roles.yaml
# The brick's DEFAULT ROLES — module.yaml actors, permission for permission, plus `<ns>:<root>:read_all`
# for an actor who sees every row. A recommendation: the composition maps them to its own role names
# (the brick decides by permission and never reads a role name).
roles:
biller:
- ar:invoice:read
- ar:invoice:write
- ar:invoice:issue
- ar:invoice:send
- ar:credit_note:write
- ar:writeoff:write
- ar:schedule:read
- ar:export_batch:run
collector:
- ar:invoice:read
- ar:invoice:collect
approver:
- ar:invoice:read
- ar:invoice:void
- ar:credit_note:approve
- ar:writeoff:approve
- ar:customer:write
- ar:settings:write
- ar:migration:read
owner:
- ar:invoice:read
- ar:settings:controls
- ar:migration:read
- ar:migration:sign
sales:
- ar:status:read
system:
- ar:invoice:read
- ar:invoice:raise
- ar:invoice:check
- ar:invoice:post
- ar:schedule:plan
- ar:schedule:stop
- ar:schedule:finish
- ar:number_series:claim
- ar:migration:load
- ar:migration:reconcile
service_clients:
- system