dodil/erp-brick-hr

tests/scenarios/roles.yaml

# The role catalogue for hr's scenarios — modules/hr actors, permission for permission (the pool is seeded from
# this file: dodil appid roles set). The bp:* lines are what the business-partner spec gives each role.
roles:
  hr_admin: [hr:person:read, hr:person:write, hr:hire:record, hr:leave:record, hr:event:record, hr:pay:read,
             hr:pay:write, hr:sensitive:read, hr:sensitive:write, hr:document:read, hr:document:write, hr:org:read,
             hr:org:write, hr:run:read, hr:run:preview, hr:run:reschedule, hr:run:cancel, hr:task:read,
             hr:task:complete, hr:step:approve, hr:draft:approve, hr:action:retry, hr:action_log:read,
             hr:config:write, hr:report:read, hr:run:monitor, hr:privacy:manage, hr:pool:invite, hr:clock:set,
             hr:offboarding:policy, bp:person:read]
  manager:  [hr:person:read, hr:hire:record, hr:leave:record, hr:event:record, hr:pay:read, hr:document:read,
             hr:org:read, hr:run:read, hr:run:preview, hr:run:reschedule, hr:task:read, hr:task:complete,
             hr:draft:approve, hr:report:read, hr:run:monitor]
  it:       [hr:person:read, hr:run:read, hr:task:read, hr:task:complete, hr:step:approve, hr:action:retry,
             hr:action_log:read]
  finance:  [hr:person:read, hr:pay:read, hr:pay:write, hr:sensitive:read, hr:sensitive:write, hr:task:read,
             hr:task:complete, hr:report:read, bp:person:read]
  assignee: [hr:task:read, hr:task:complete]
  employee: [hr:self:read]
  clock:    [hr:run:tick]
  # hr v4 (HR-63, HR-64): the neighbours' service clients, as modules/hr actors expenses_client / time_off_client
  expenses_client: [hr:assignment:read, hr:roster:read]
  time_off_client: [hr:assignment:read, hr:roster:read]
service_clients: [clock, expenses_client, time_off_client]