dodil/erp-brick-contracts

tests/tier1.roles.yaml

# tier 1 (tests/test_tier1.py): hr's roles and contracts' roles for the same people, as one pool would hold them.
roles:
  clock: ['hr:run:tick', 'contract:run:tick']
  contract_admin: ['contract:type:write', 'contract:clause:write', 'contract:template:write', 'contract:template:approve',
    'contract:contract:read', 'contract:contract:read_all', 'contract:employment:read', 'contract:contract:write', 'contract:contract:send',
    'contract:contract:recall', 'contract:contract:upload_executed', 'contract:evidence:read', 'contract:amendment:write',
    'contract:settings:write', 'bp:partner:write', 'bp:person:read']
  director: ['contract:approval:decide', 'contract:contract:read', 'contract:contract:sign', 'hr:person:read']
  finance: ['bp:person:read', 'contract:approval:decide', 'contract:contract:read', 'hr:pay:read', 'hr:pay:write', 'hr:person:read',
    'hr:report:read', 'hr:sensitive:read', 'hr:sensitive:write', 'hr:task:complete', 'hr:task:read']
  hr_admin: ['bp:person:read', 'contract:amendment:write', 'contract:contract:read', 'contract:contract:recall', 'contract:contract:send',
    'contract:contract:upload_executed', 'contract:contract:write', 'contract:employment:read', 'contract:evidence:read',
    'hr:action:retry', 'hr:action_log:read', 'hr:clock:set', 'hr:config:write', 'hr:document:read', 'hr:document:write', 'hr:draft:approve',
    'hr:event:record', 'hr:hire:record', 'hr:leave:record', 'hr:org:read', 'hr:org:write', 'hr:pay:read', 'hr:pay:write',
    'hr:person:read', 'hr:person:write', 'hr:pool:invite', 'hr:privacy:manage', 'hr:report:read', 'hr:run:cancel', 'hr:run:preview',
    'hr:run:read', 'hr:run:reschedule', 'hr:sensitive:read', 'hr:sensitive:write', 'hr:step:approve', 'hr:task:complete',
    'hr:task:read']
service_clients: [clock]