Goods and Services permissions now added

git-svn-id: https://ledger-smb.svn.sourceforge.net/svnroot/ledger-smb/trunk@1573 4979c152-3d1c-0410-bac9-87ea11338e46

1 files changed, 128 insertions, 1 deletions

diff --git a/sql/modules/Roles.sql b/sql/modules/Roles.sql
index f61568e8..cfdd62c2 100644
--- a/sql/modules/Roles.sql
+++ b/sql/modules/Roles.sql
@@ -586,24 +586,149 @@ values (81, 'allow', 'lsmb_<?lsmb dbname ?>__create_part');
 INSERT INTO menu_acl (node_id, acl_type, role_name)
 values (82, 'allow', 'lsmb_<?lsmb dbname ?>__create_part');
 
+
 CREATE ROLE lsmb_<?lsmb dbname ?>__edit_part
 WITH INHERIT NOLOGIN;
 
+GRANT UPDATE ON parts TO lsmb_<?lsmb dbname ?>__edit_part;
+
+INSERT INTO menu_acl (node_id, acl_type, role_name)
+values (77, 'allow', 'lsmb_<?lsmb dbname ?>__edit_part');
+INSERT INTO menu_acl (node_id, acl_type, role_name)
+values (85, 'allow', 'lsmb_<?lsmb dbname ?>__edit_part');
+INSERT INTO menu_acl (node_id, acl_type, role_name)
+values (86, 'allow', 'lsmb_<?lsmb dbname ?>__edit_part');
+INSERT INTO menu_acl (node_id, acl_type, role_name)
+values (87, 'allow', 'lsmb_<?lsmb dbname ?>__edit_part');
+INSERT INTO menu_acl (node_id, acl_type, role_name)
+values (88, 'allow', 'lsmb_<?lsmb dbname ?>__edit_part');
+INSERT INTO menu_acl (node_id, acl_type, role_name)
+values (89, 'allow', 'lsmb_<?lsmb dbname ?>__edit_part');
+INSERT INTO menu_acl (node_id, acl_type, role_name)
+values (90, 'allow', 'lsmb_<?lsmb dbname ?>__edit_part');
+INSERT INTO menu_acl (node_id, acl_type, role_name)
+values (91, 'allow', 'lsmb_<?lsmb dbname ?>__edit_part');
+INSERT INTO menu_acl (node_id, acl_type, role_name)
+values (93, 'allow', 'lsmb_<?lsmb dbname ?>__edit_part');
+
+
 CREATE ROLE lsmb_<?lsmb dbname ?>__inventory_reports
 WITH INHERIT NOLOGIN;
 
+GRANT SELECT ON ar TO lsmb_<?lsmb dbname ?>__inventory_reports;
+GRANT SELECT ON ap TO lsmb_<?lsmb dbname ?>__inventory_reports;
+GRANT SELECT ON inventory TO lsmb_<?lsmb dbname ?>__inventory_reports;
+GRANT SELECT ON invoice TO lsmb_<?lsmb dbname ?>__inventory_reports;
+GRANT SELECT ON acc_trans TO lsmb_<?lsmb dbname ?>__inventory_reports;
+
+INSERT INTO menu_acl (node_id, acl_type, role_name)
+values (77, 'allow', 'lsmb_<?lsmb dbname ?>__inventory_reports');
+INSERT INTO menu_acl (node_id, acl_type, role_name)
+values (85, 'allow', 'lsmb_<?lsmb dbname ?>__inventory_reports');
+INSERT INTO menu_acl (node_id, acl_type, role_name)
+values (88, 'allow', 'lsmb_<?lsmb dbname ?>__inventory_reports');
+INSERT INTO menu_acl (node_id, acl_type, role_name)
+values (94, 'allow', 'lsmb_<?lsmb dbname ?>__inventory_reports');
+
+
+CREATE ROLE lsmb_<?lsmb dbname ?>__create_pricegroup
+WITH INHERIT NOLOGIN
+IN ROLE lsmb_<?lsmb dbname ?>__read_contact;
+
+GRANT INSERT ON pricegroup TO lsmb_<?lsmb dbname ?>__create_pricegroup;
+GRANT UPDATE ON entity_credit_account TO lsmb_<?lsmb dbname ?>__create_pricegroup;
+
+INSERT INTO menu_acl (node_id, acl_type, role_name)
+values (77, 'allow', 'lsmb_<?lsmb dbname ?>__create_pricegroup');
+INSERT INTO menu_acl (node_id, acl_type, role_name)
+values (83, 'allow', 'lsmb_<?lsmb dbname ?>__create_pricegroup');
+
+
+CREATE ROLE lsmb_<?lsmb dbname ?>__edit_pricegroup
+WITH INHERIT NOLOGIN
+IN ROLE lsmb_<?lsmb dbname ?>__read_contact;
+
+GRANT UPDATE ON pricegroup TO lsmb_<?lsmb dbname ?>__edit_pricegroup;
+GRANT UPDATE ON entity_credit_account TO lsmb_<?lsmb dbname ?>__edit_pricegroup;
+
+INSERT INTO menu_acl (node_id, acl_type, role_name)
+values (77, 'allow', 'lsmb_<?lsmb dbname ?>__edit_pricegroup');
+INSERT INTO menu_acl (node_id, acl_type, role_name)
+values (85, 'allow', 'lsmb_<?lsmb dbname ?>__edit_pricegroup');
+INSERT INTO menu_acl (node_id, acl_type, role_name)
+values (92, 'allow', 'lsmb_<?lsmb dbname ?>__edit_pricegroup');
+
 CREATE ROLE lsmb_<?lsmb dbname ?>__stock_assembly
 WITH INHERIT NOLOGIN;
 
+GRANT UPDATE ON parts TO lsmb_<?lsmb dbname ?>__stock_assembly;
+
+INSERT INTO menu_acl (node_id, acl_type, role_name)
+values (77, 'allow', 'lsmb_<?lsmb dbname ?>__stock_assembly');
+INSERT INTO menu_acl (node_id, acl_type, role_name)
+values (84, 'allow', 'lsmb_<?lsmb dbname ?>__stock_assembly');
+
+
 CREATE ROLE lsmb_<?lsmb dbname ?>__ship_inventory
-WITH INHERIT NOLOGIN;
+WITH INHERIT NOLOGIN
+IN ROLE lsmb_<?lsmb dbname ?>__list_sales_orders;
+
+GRANT INSERT ON inventory TO lsmb_<?lsmb dbname ?>__ship_inventory;
+
+INSERT INTO menu_acl (node_id, acl_type, role_name)
+values (63, 'allow', 'lsmb_<?lsmb dbname ?>__ship_inventory');
+INSERT INTO menu_acl (node_id, acl_type, role_name)
+values (64, 'allow', 'lsmb_<?lsmb dbname ?>__ship_inventory');
+
 
 CREATE ROLE lsmb_<?lsmb dbname ?>__receive_inventory
+WITH INHERIT NOLOGIN
+IN ROLE lsmb_<?lsmb dbname ?>__list_purchase_orders;
+
+GRANT INSERT ON inventory TO lsmb_<?lsmb dbname ?>__receive_inventory;
+
+INSERT INTO menu_acl (node_id, acl_type, role_name)
+values (63, 'allow', 'lsmb_<?lsmb dbname ?>__receive_inventory');
+INSERT INTO menu_acl (node_id, acl_type, role_name)
+values (65, 'allow', 'lsmb_<?lsmb dbname ?>__receive_inventory');
+
+
+CREATE ROLE lsmb_<?lsmb dbname ?>__transfer_inventory
 WITH INHERIT NOLOGIN;
 
+GRANT INSERT ON inventory TO lsmb_<?lsmb dbname ?>__transfer_inventory;
+
+INSERT INTO menu_acl (node_id, acl_type, role_name)
+values (63, 'allow', 'lsmb_<?lsmb dbname ?>__transfer_inventory');
+INSERT INTO menu_acl (node_id, acl_type, role_name)
+values (66, 'allow', 'lsmb_<?lsmb dbname ?>__transfer_inventory');
+
 CREATE ROLE lsmb_<?lsmb dbname ?>__create_warehouse
 WITH INHERIT NOLOGIN;
 
+GRANT INSERT ON warehouse TO lsmb_<?lsmb dbname ?>__create_warehouse;
+
+INSERT INTO menu_acl (node_id, acl_type, role_name)
+values (128, 'allow', 'lsmb_<?lsmb dbname ?>__create_warehouse');
+INSERT INTO menu_acl (node_id, acl_type, role_name)
+values (141, 'allow', 'lsmb_<?lsmb dbname ?>__create_warehouse');
+INSERT INTO menu_acl (node_id, acl_type, role_name)
+values (142, 'allow', 'lsmb_<?lsmb dbname ?>__create_warehouse');
+
+
+CREATE ROLE lsmb_<?lsmb dbname ?>__edit_warehouse
+WITH INHERIT NOLOGIN;
+
+GRANT UPDATE ON warehouse TO lsmb_<?lsmb dbname ?>__edit_warehouse;
+
+INSERT INTO menu_acl (node_id, acl_type, role_name)
+values (128, 'allow', 'lsmb_<?lsmb dbname ?>__edit_warehouse');
+INSERT INTO menu_acl (node_id, acl_type, role_name)
+values (141, 'allow', 'lsmb_<?lsmb dbname ?>__edit_warehouse');
+INSERT INTO menu_acl (node_id, acl_type, role_name)
+values (143, 'allow', 'lsmb_<?lsmb dbname ?>__edit_warehouse');
+
+
 CREATE ROLE lsmb_<?lsmb dbname ?>__all_inventory
 WITH INHERIT NOLOGIN
 IN ROLE lsmb_<?lsmb dbname ?>__create_part,
@@ -611,6 +736,8 @@ lsmb_<?lsmb dbname ?>__inventory_reports,
 lsmb_<?lsmb dbname ?>__stock_assembly,
 lsmb_<?lsmb dbname ?>__ship_inventory,
 lsmb_<?lsmb dbname ?>__receive_inventory,
+lsmb_<?lsmb dbname ?>__transfer_inventory,
+lsmb_<?lsmb dbname ?>__edit_warehouse,
 lsmb_<?lsmb dbname ?>__create_warehouse;
 
 -- GL