Standard Roles for xTuple
xTuple does not come with standard roles sets of privileges per function or department.
Therefore I have setup a Role-Privileges Classification Matrix to develop sets of standard roles for xTuple. I have setup roles called Accounting Staff, Accounting Manager, Sales Staff, Sales Manager, Procurement Staff, and Procurement Manager.
I have also attempted to risk-rank them. I then tried to determine what was required by a staff person and privileges that should be restricted to managers only.
I welcome feedback on the matrix …. Are the sets of privileges appropriate, too restrictive or too extensive? Have I correctly risk-rank the individuals privileges? I would also welcome it if someone wanted to take a stab at developing a role for warehouse staff and managers.
I think the bottom-line is - what is the appropriate set of privileges of a particular role. The risk is that a role (and/or a user) could be given more privileges than are needed to perform his job function.
Gil,
Thanks for the input. It would be helpful if I had a brief description of the privileges. Many are self-explanatory but others required some description in order to fully understand the privileges
There are definitely other “standard” roles that could be developed; however, I think the first issue would be to compile brief descriptions and properly risk-rank the privileges.
Eden (ereeves)
Eden,
Yes, it would be very helpful to have descriptions of the available privileges. There are over 400 in the PostBooks database and almost 500 if you include xtdesktop, xtpos, te (Time/Expense Lite), and the proprietary xtmfg and xtbatch packages. We keep getting requests for more, too.
Documenting the privileges is a big project. I've started by creating http://www.xtuple.org/core-privileges and its child pages, one for the core plus one for each package. Anyone with privilege to edit the xTuple Wiki can modify these pages (Eden - you have this privilege).
Gil
Again ... thanks Gil. Could we get a column for "Risk Level"
done - risk column added to all 5 pages
ereeves,
This is a nice start on developing standard roles. Thank you.
A few general comments:
Question: what other roles do you see as standard? For example, does Shipping and Receiving fall under Warehouse staff and management or is that a separate department?
Gil