Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

E12 team to provide custom permissions table #544

Closed
anchit-chandran opened this issue Aug 4, 2023 · 9 comments
Closed

E12 team to provide custom permissions table #544

anchit-chandran opened this issue Aug 4, 2023 · 9 comments
Assignees
Labels
refactor Refactoring and tidying work security An issue which affects (or could affect) security

Comments

@anchit-chandran
Copy link
Collaborator

anchit-chandran commented Aug 4, 2023

Update docs perms table once provided

@eatyourpeas
Copy link
Member

These map roles to groups.

Role Group
Audit Centre Lead Clinician trust_audit_team_view_only
Audit Centre Clinician trust_audit_team_edit_access
Audit Centre Administrator trust_audit_team_full_access
RCPCH Audit Team epilepsy12_audit_team_full_access
RCPCH Audit Children and Family patient_access

Basic permissions are already mapped to groups and agreed
These custom permissions have not yet been agreed:

CAN_LOCK_CHILD_CASE_DATA_FROM_EDITING
CAN_UNLOCK_CHILD_CASE_DATA_FROM_EDITING
CAN_OPT_OUT_CHILD_FROM_INCLUSION_IN_AUDIT
CAN_APPROVE_ELIGIBILITY
CAN_REGISTER_CHILD_IN_EPILEPSY12
CAN_UNREGISTER_CHILD_IN_EPILEPSY12
CAN_EDIT_EPILEPSY12_LEAD_CENTRE
CAN_ALLOCATE_EPILEPSY12_LEAD_CENTRE
CAN_TRANSFER_EPILEPSY12_LEAD_CENTRE
CAN_DELETE_EPILEPSY12_LEAD_CENTRE
CAN_CONSENT_TO_AUDIT_PARTICIPATION

@AmaniKrayemRCPCH @nikyraja could you please allocate permissions to groups?

@AmaniKrayemRCPCH
Copy link
Contributor

Heya,

Firstly, check if the table you've given is correct? Should these groups be swapped
Capture1

Will add a comment with permissions shortly

@AmaniKrayemRCPCH
Copy link
Contributor

to confirm, by 'Register' you mean to add a new patient? If so, the below is correct.

Group Permissions
trust_audit_team_view_only CAN_LOCK_CHILD_CASE_DATA_FROM_EDITING
CAN_UNLOCK_CHILD_CASE_DATA_FROM_EDITING
CAN_OPT_OUT_CHILD_FROM_INCLUSION_IN_THE_AUDIT
CAN_REGISTER_CHILD_IN_EPILEPSY12
trust_audit_team_edit_access CAN_LOCK_CHILD_CASE_DATA_FROM_EDITING
CAN_UNLOCK_CHILD_CASE_DATA_FROM_EDITING
CAN_OPT_OUT_CHILD_FROM_INCLUSION_IN_THE_AUDIT
CAN_APPROVE_ELIGIBILITY
CAN_REGISTER_CHILD_IN_EPILEPSY12
CAN_ALLOCATE_EPILEPSY12_LEAD_CENTRE
trust_audit_team_full_access CAN_LOCK_CHILD_CASE_DATA_FROM_EDITING
CAN_UNLOCK_CHILD_CASE_DATA_FROM_EDITING
CAN_OPT_OUT_CHILD_FROM_INCLUSION_IN_THE_AUDIT
CAN_APPROVE_ELIGIBILITY
CAN_REGISTER_CHILD_IN_EPILEPSY12
CAN_UNREGISTER_CHILD_IN_EPILEPSY12
CAN_EDIT_EPILEPSY12_LEAD_CENTRE
CAN_ALLOCATE_EPILEPSY12_LEAD_CENTRE
CAN_TRASNFER_EPILEPSY12_LEAD_CENTRE
CAN_DELETE_EPILEPSY12_LEAD_CENTRE
epilepsy12_audit_team_full_access CAN_LOCK_CHILD_CASE_DATA_FROM_EDITING
CAN_UNLOCK_CHILD_CASE_DATA_FROM_EDITING
CAN_OPT_OUT_CHILD_FROM_INCLUSION_IN_THE_AUDIT
CAN_APPROVE_ELIGIBILITY
CAN_REGISTER_CHILD_IN_EPILEPSY12
CAN_UNREGISTER_CHILD_IN_EPILEPSY12
CAN_EDIT_EPILEPSY12_LEAD_CENTRE
CAN_ALLOCATE_EPILEPSY12_LEAD_CENTRE
CAN_TRASNFER_EPILEPSY12_LEAD_CENTRE
CAN_DELETE_EPILEPSY12_LEAD_CENTRE
patient_access CAN_CONSENT_TO_AUDIT_PARTICIPATION

@AmaniKrayemRCPCH
Copy link
Contributor

sorry, slight edit to the trust_audit_team_view_only permissions

Group Permissions
trust_audit_team_view_only CAN_LOCK_CHILD_CASE_DATA_FROM_EDITINGCAN_UNLOCK_CHILD_CASE_DATA_FROM_EDITINGCAN_OPT_OUT_CHILD_FROM_INCLUSION_IN_THE_AUDITCAN_REGISTER_CHILD_IN_EPILEPSY12
trust_audit_team_edit_access CAN_LOCK_CHILD_CASE_DATA_FROM_EDITINGCAN_UNLOCK_CHILD_CASE_DATA_FROM_EDITINGCAN_OPT_OUT_CHILD_FROM_INCLUSION_IN_THE_AUDITCAN_APPROVE_ELIGIBILITYCAN_REGISTER_CHILD_IN_EPILEPSY12CAN_ALLOCATE_EPILEPSY12_LEAD_CENTRE
trust_audit_team_full_access CAN_LOCK_CHILD_CASE_DATA_FROM_EDITINGCAN_UNLOCK_CHILD_CASE_DATA_FROM_EDITINGCAN_OPT_OUT_CHILD_FROM_INCLUSION_IN_THE_AUDITCAN_APPROVE_ELIGIBILITYCAN_REGISTER_CHILD_IN_EPILEPSY12CAN_UNREGISTER_CHILD_IN_EPILEPSY12CAN_EDIT_EPILEPSY12_LEAD_CENTRECAN_ALLOCATE_EPILEPSY12_LEAD_CENTRECAN_TRASNFER_EPILEPSY12_LEAD_CENTRECAN_DELETE_EPILEPSY12_LEAD_CENTRE
epilepsy12_audit_team_full_access CAN_LOCK_CHILD_CASE_DATA_FROM_EDITINGCAN_UNLOCK_CHILD_CASE_DATA_FROM_EDITINGCAN_OPT_OUT_CHILD_FROM_INCLUSION_IN_THE_AUDITCAN_APPROVE_ELIGIBILITYCAN_REGISTER_CHILD_IN_EPILEPSY12CAN_UNREGISTER_CHILD_IN_EPILEPSY12CAN_EDIT_EPILEPSY12_LEAD_CENTRECAN_ALLOCATE_EPILEPSY12_LEAD_CENTRECAN_TRASNFER_EPILEPSY12_LEAD_CENTRECAN_DELETE_EPILEPSY12_LEAD_CENTRE
patient_access CAN_CONSENT_TO_AUDIT_PARTICIPATION

@eatyourpeas
Copy link
Member

eatyourpeas commented Aug 24, 2023 via email

@AmaniKrayemRCPCH
Copy link
Contributor

Ah understood. Ok, the correct version of the permissions table is below

Group Permissions
trust_audit_team_view_only
trust_audit_team_edit_access CAN_LOCK_CHILD_CASE_DATA_FROM_EDITING
CAN_UNLOCK_CHILD_CASE_DATA_FROM_EDITING
CAN_OPT_OUT_CHILD_FROM_INCLUSION_IN_THE_AUDIT
CAN_APPROVE_ELIGIBILITY
CAN_REGISTER_CHILD_IN_EPILEPSY12
CAN_ALLOCATE_EPILEPSY12_LEAD_CENTRE
trust_audit_team_full_access CAN_LOCK_CHILD_CASE_DATA_FROM_EDITING
CAN_UNLOCK_CHILD_CASE_DATA_FROM_EDITING
CAN_OPT_OUT_CHILD_FROM_INCLUSION_IN_THE_AUDIT
CAN_APPROVE_ELIGIBILITY
CAN_REGISTER_CHILD_IN_EPILEPSY12
CAN_UNREGISTER_CHILD_IN_EPILEPSY12
CAN_EDIT_EPILEPSY12_LEAD_CENTRE
CAN_ALLOCATE_EPILEPSY12_LEAD_CENTRE
CAN_TRASNFER_EPILEPSY12_LEAD_CENTRE
CAN_DELETE_EPILEPSY12_LEAD_CENTRE
epilepsy12_audit_team_full_access CAN_LOCK_CHILD_CASE_DATA_FROM_EDITING
CAN_UNLOCK_CHILD_CASE_DATA_FROM_EDITING
CAN_OPT_OUT_CHILD_FROM_INCLUSION_IN_THE_AUDIT
CAN_APPROVE_ELIGIBILITY
CAN_REGISTER_CHILD_IN_EPILEPSY12
CAN_UNREGISTER_CHILD_IN_EPILEPSY12
CAN_EDIT_EPILEPSY12_LEAD_CENTRE
CAN_ALLOCATE_EPILEPSY12_LEAD_CENTRE
CAN_TRASNFER_EPILEPSY12_LEAD_CENTRE
CAN_DELETE_EPILEPSY12_LEAD_CENTRE
patient_access CAN_CONSENT_TO_AUDIT_PARTICIPATION

@AmaniKrayemRCPCH
Copy link
Contributor

Can I check on the status of this? Has it been actioned?

Is this related to #541

@eatyourpeas
Copy link
Member

This still needs implementing

@eatyourpeas eatyourpeas self-assigned this Nov 17, 2023
@eatyourpeas eatyourpeas added before-launch security An issue which affects (or could affect) security refactor Refactoring and tidying work labels Nov 17, 2023
eatyourpeas added a commit that referenced this issue Nov 18, 2023
tidy permissions as per e12 issue #544
@eatyourpeas
Copy link
Member

closed with #640

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
refactor Refactoring and tidying work security An issue which affects (or could affect) security
Projects
None yet
Development

No branches or pull requests

4 participants