Security Permission Groups

A permission group is a collection internal users who share the same responsibilities and therefore access permissions on the Register. A permission group contains zero or more permissions as well as zero or more internal users. An internal user can belong to zero or more permission groups. If an internal user does not belong to any permission group, then they will not be able to access any functionality on the Register apart form viewing and maintaining their own user profile.

A permission group has the following attributes:

• Code – a unique code for the permission group, e.g. P011
• Name – name of the permission group, e.g. Edit form
• Description – descriptive text explaining the permission group
• Status – indicates if the permission group is active or inactive, e.g. active
• Avatar – the service transaction identifier of an avatar for this permission group

All permission groups are stored using the same mechanism as all other data, via service transactions, with a current activated version and previous versions of the data.

The Domain Tree for a permission group is as follows:

{
  "_id": "<unique_domain_id>",
  "name": "Group",
  "attributes":{
    "Code":"PG09",
    "Name":"Senior finance",
    "Status":"active",
    "Avatar":"<identifier_of_avatar_service_transaction>",
    "Description":"The group of people who are involved finance management and investigations, and they can record account transactions manually and use certain payment methods"
  },
  "permissions":[
    {
      "_id":"<unique_domain_id>",
      "name":"Permission",
      "arrName":"permissions",
      "attributes":{
        "SystemName":"PERM_P004_VIEW_TASK_HISTORY"
      }
    }
  ]
}

Notes:

1. The permissions array contains 0 or more Permission domains linked via the SystemName of that permission.