dodil/erp-brick-consolidation

DODIL ERP brick: consolidation

src/brick_consolidation/roles.yaml

# The brick's DEFAULT ROLES — module.yaml actors, permission for permission, plus `<ns>:<root>:read_all`
# for an actor who sees every row. A recommendation: the composition maps them to its own role names
# (the brick decides by permission and never reads a role name).
roles:
  group_accountant:
  - cons:group:read
  - cons:structure:write
  - cons:data:collect
  - cons:data:upload
  - cons:translate:run
  - cons:eliminate:run
  - cons:inventory:write
  - cons:journal:write
  - cons:journal:reverse
  - cons:period:open
  - cons:report:read
  - cons:settings:write
  - cons:migration:read
  group_controller:
  - cons:group:read
  - cons:structure:approve
  - cons:data:accept
  - cons:journal:approve
  - cons:period:signoff
  - cons:period:reopen
  - cons:report:read
  - cons:migration:read
  auditor:
  - cons:group:read
  - cons:report:read
  - cons:migration:read
  owner:
  - cons:group:read
  - cons:report:read
  - cons:settings:controls
  - cons:migration:read
  - cons:migration:sign
  system:
  - cons:group:read
  - cons:data:load
  - cons:journal:post_auto
  - cons:carry_forward:derive
  - cons:statement:materialise
  - cons:number_series:claim
  - cons:migration:load
  - cons:migration:reconcile
service_clients:
- system