Permissions that survive a reorganisation
Permissions that a reorganisation cannot shake
Some screens decided access by which organisation you belonged to, or by what your job label said. Both of those change, and when they did, access changed with them. The decision now rests on permission keys.
What is new
Decided by permission key
- A permission is granted to a person, and the screen checks only that permission.
- Reorganising, or renaming a job title, no longer affects who can open what.
One place for the decision
- The same check, previously scattered across several places, is consolidated into two permission keys managed in one place.
Billing rights split from viewing
- The whole team can view the cost screen, while the right to issue a bill is restricted separately.
- The name of the person who actually issued a bill is recorded on the document.
- Customer care screens use the same permission keys.
Checked on the screen and again on the server
- Hiding a button is not enough, so the server checks again even when the screen has hidden it.
- A request without permission is refused whichever path it arrives by.