Thread Rating:
  • 0 Vote(s) - 0 Average
  • 1
  • 2
  • 3
  • 4
  • 5
Out-of-the-Box Security - Needs Work?
12-05-2017, 11:17 PM, (This post was last modified: 12-05-2017, 11:49 PM by VortecCPI.)
#11
RE: Out-of-the-Box Security - Contract
I was thinking about reconstructing the entire ACL. My first thought is to create Tokens in line with each Module and Context. That would make it very easy to see and visualize since each Token would exactly match each area of each web page. For example:

Sales - Transactions
Sales - Inquiries
Sales - Maintenance
...
Vendors - Transactions
Vendors - Inquiries
Vendors - Maintenance
Etc...

That would yield an awful lot of Tokens (>36) so I think it might be too complex and tedious for some users. It also does not necessarily align with context of usage from a user's needs and/or perspective.

Surely somebody else has already addressed this issue...
After looking at the FrontAccounting fork I see they have done pretty much what my initial thought was. It uses 23 Tokens; one for each Module/Section:

Banking & GL analytics:
Banking & GL configuration:
Banking & GL transactions:
Company setup:
Dimensions configuration:
Dimensions:
Fixed Assets analytics:
Fixed Assets configuration:
Fixed Assets operations:
Inventory analytics:
Inventory configuration:
Inventory operations:
Manufacturing analytics:
Manufacturing configuration:
Manufacturing transactions:
Purchase analytics:
Purchase configuration:
Purchase transactions:
Sales configuration:
Sales related reports:
Sales transactions:
Special maintenance:
System administration:

   

Just some food for thought...

Complete ACL structure looks like this:

System administration:
Install/update companies
Install/update languages
Install/upgrade modules
Software upgrades

Company setup:
Company parameters
Access levels edition
Users setup
Point of sales definitions
Printers configuration
Print profiles
Payment terms
Shipping ways
Credit status definitions changes
Inventory locations changes
Inventory movement types
Manufacture work centres
Forms setup
Contact categories

Special maintenance:
Voiding transactions
Database backup/restore
Common view/print transactions interface
Attaching documents
Display preferences
Password changes
Edit other users transactions

Sales configuration:
Sales types
Sales prices edition
Sales staff maintenance
Sales areas maintenance
Sales groups changes
Sales templates
Recurrent invoices definitions

Sales transactions:
Sales transactions view
Sales customer and branches changes
Sales quotations
Sales orders edition
Sales deliveries edition
Sales invoices edition
Sales credit notes against invoice
Sales freehand credit notes
Customer payments entry
Customer payments allocation

Sales related reports:
Sales analytical reports
Sales document bulk reports
Sales prices listing
Sales staff listing
Customer bulk listing
Customer status report
Customer payments report

Purchase configuration:
Purchase price changes

Purchase transactions:
Supplier transactions view
Suppliers changes
Purchase order entry
Purchase receive
Supplier invoices
Deleting GRN items during invoice entry
Supplier credit notes
Supplier payments
Supplier payments allocations

Purchase analytics:
Supplier analytical reports
Supplier document bulk reports
Supplier payments report

Inventory configuration:
Stock items add/edit
Sales kits
Item categories
Units of measure

Inventory operations:
Stock status view
Stock transactions view
Foreign item codes entry
Inventory location transfers
Inventory adjustments

Inventory analytics:
Reorder levels
Items analytical reports and inquiries
Inventory valuation report

Fixed Assets configuration:
Fixed Asset items add/edit
Fixed Asset categories
Fixed Asset classes

Fixed Assets operations:
Fixed Asset transactions view
Fixed Asset location transfers
Fixed Asset disposals
Depreciation

Fixed Assets analytics:
Fixed Asset analytical reports and inquiries

Manufacturing configuration:
Bill of Materials

Manufacturing transactions:
Manufacturing operations view
Work order entry
Material issues entry
Final product receive
Work order releases

Manufacturing analytics:
Work order analytical reports and inquiries
Manufacturing cost inquiry
Work order bulk reports
Bill of materials reports

Dimensions configuration:
Dimension tags

Dimensions:
Dimension view
Dimension entry
Dimension reports

Banking & GL configuration:
Item tax type definitions
GL accounts edition
GL account groups
GL account classes
Quick GL entry definitions
Currencies
Bank accounts
Tax rates
Tax groups
Fiscal years maintenance
Company GL setup
GL Account tags
Closing GL transactions
Allow entry on non closed Fiscal years

Banking & GL transactions:
Bank transactions view
GL postings view
Exchange rate table changes
Bank payments
Bank deposits
Bank account transfers
Bank reconciliation
Manual journal entries
Journal entries to bank related accounts
Budget edition
Item standard costs
Revenue / Cost Accruals

Banking & GL analytics:
GL analytical reports and inquiries
Tax reports and inquiries
Bank reports and inquiries
GL reports and inquiries
https://www.linkedin.com/in/eclipsepaulbecker
Reply


Messages In This Thread
RE: Out-of-the-Box Security - Contract - by phil - 12-05-2017, 05:11 AM
RE: Out-of-the-Box Security - Contract - by VortecCPI - 12-05-2017, 11:17 PM

Forum Jump:


Users browsing this thread: 1 Guest(s)