added bill and document CRUD permissions

hiqdev · Dec 11, 2017 · 96640cc · 96640cc
1 parent 050bc87
commit 96640cc
Show file tree

Hide file tree

Showing 3 changed files with 30 additions and 3 deletions.
diff --git a/src/Initer.php b/src/Initer.php
@@ -37,6 +37,7 @@ class Initer
         'role:manager' => [
             'role:support', 'role:document.manager', 'role:stock.manager',
             'manage',
+            'bill.read',
             'domain.pay', 'domain.push',
             'server.pay',
             'contact.force-verify',
@@ -61,7 +62,7 @@ class Initer
             'domain.push', 'domain.force-push',
         ],
         'role:bill.manager' => [
-            'bill.create', 'bill.update', 'bill.delete',
+            'bill.read', 'bill.create', 'bill.update', 'bill.delete',
         ],
         'role:employee.manager' => [
             'employee.read', 'employee.create', 'employee.update', 'employee.delete',
@@ -70,6 +71,7 @@ class Initer
             'stock.read', 'stock.create', 'stock.update', 'stock.delete',
         ],
         'role:document.manager' => [
+            'document.read', 'document.create', 'document.update', 'document.delete',
             'document.manage', 'document.generate',
         ],
         'role:document.master' => [

diff --git a/src/files/items.php b/src/files/items.php
@@ -37,6 +37,7 @@
             'role:document.manager',
             'role:stock.manager',
             'manage',
+            'bill.read',
             'domain.pay',
             'domain.push',
             'server.pay',
@@ -84,6 +85,7 @@
     'role:bill.manager' => [
         'type' => 1,
         'children' => [
+            'bill.read',
             'bill.create',
             'bill.update',
             'bill.delete',
@@ -110,6 +112,10 @@
     'role:document.manager' => [
         'type' => 1,
         'children' => [
+            'document.read',
+            'document.create',
+            'document.update',
+            'document.delete',
             'document.manage',
             'document.generate',
         ],
@@ -160,6 +166,9 @@
     'manage' => [
         'type' => 2,
     ],
+    'bill.read' => [
+        'type' => 2,
+    ],
     'mailing.prepare' => [
         'type' => 2,
     ],
@@ -220,6 +229,18 @@
     'stock.delete' => [
         'type' => 2,
     ],
+    'document.read' => [
+        'type' => 2,
+    ],
+    'document.create' => [
+        'type' => 2,
+    ],
+    'document.update' => [
+        'type' => 2,
+    ],
+    'document.delete' => [
+        'type' => 2,
+    ],
     'document.manage' => [
         'type' => 2,
     ],

diff --git a/tests/unit/CheckAccessTrait.php b/tests/unit/CheckAccessTrait.php
@@ -79,8 +79,10 @@ public function testManager()
     {
         $this->assertAccesses('role:manager', [
             'support', 'manage',
+            'bill.read',
             'domain.pay', 'domain.push',
             'server.pay', 'server.sell',
+            'document.read', 'document.create', 'document.update', 'document.delete',
             'document.manage', 'document.generate',
             'contact.force-verify',
             'mailing.prepare', 'mailing.send',
@@ -99,17 +101,19 @@ public function testEmployee()
 
     public function testMighty()
     {
-        $this->auth->setAssignments('role:admin,role:manager,role:document.master,bill.create,domain.freeze,domain.force-push,domain.delete,employee.read', 'user:mighty');
+        $this->auth->setAssignments('role:admin,role:manager,role:document.master,role:bill.manager,domain.freeze,domain.force-push,domain.delete,employee.read', 'user:mighty');
 
         $this->assertAccesses('user:mighty', [
             'support', 'manage', 'admin',
-            'employee.read', 'bill.create',
+            'bill.read', 'bill.create', 'bill.update', 'bill.delete',
             'domain.freeze', 'domain.push', 'domain.force-push', 'domain.delete',
             'domain.pay', 'server.pay', 'server.sell',
+            'document.read', 'document.create', 'document.update', 'document.delete',
             'document.manage', 'document.generate', 'document.generate-all',
             'contact.force-verify',
             'mailing.prepare', 'mailing.send',
             'stock.read', 'stock.create', 'stock.update', 'stock.delete',
+            'employee.read',
         ]);
     }