dodil/erp-brick-consolidation
DODIL ERP brick: consolidation
tests/scenarios/roles.yaml
# The brick's DEFAULT ROLES — module.yaml actors, permission for permission, plus `<ns>:<root>:read_all`
# for an actor who sees every row. A recommendation: the composition maps them to its own role names
# (the brick decides by permission and never reads a role name).
roles:
group_accountant:
- cons:group:read
- cons:structure:write
- cons:data:collect
- cons:data:upload
- cons:translate:run
- cons:eliminate:run
- cons:inventory:write
- cons:journal:write
- cons:journal:reverse
- cons:period:open
- cons:report:read
- cons:settings:write
- cons:migration:read
group_controller:
- cons:group:read
- cons:structure:approve
- cons:data:accept
- cons:journal:approve
- cons:period:signoff
- cons:period:reopen
- cons:report:read
- cons:migration:read
auditor:
- cons:group:read
- cons:report:read
- cons:migration:read
owner:
- cons:group:read
- cons:report:read
- cons:settings:controls
- cons:migration:read
- cons:migration:sign
system:
- cons:group:read
- cons:data:load
- cons:journal:post_auto
- cons:carry_forward:derive
- cons:statement:materialise
- cons:number_series:claim
- cons:migration:load
- cons:migration:reconcile
service_clients:
- system