Permissions
The permissions model is a way to control access to the system resources. It is based on the group-based access control model, where users are assigned to groups that have specific permissions.
Every permission is available only to specific roles and is associated with a resource and an action. The resource is the object that the user wants to access, and the action is the operation that the user wants to perform on the resource.
The permission format is RESOURCE_ACTION, where RESOURCE is the resource name and ACTION is the action name.
| Permission | Description | Roles |
|---|---|---|
| DOCTOR_LIST | Can view the list of doctors | - BACKEND CLIENT ONLY - |
| DOCTOR_DETAIL | Can view the details of a doctor | - BACKEND CLIENT ONLY - |
| DOCTOR_CREATE | Can create a new doctor | - BACKEND CLIENT ONLY - |
| DOCTOR_UPDATE | Can modify a doctor | - BACKEND CLIENT ONLY - |
| DOCTOR_DELETE | Can delete a doctor | - BACKEND CLIENT ONLY - |
| PHARMACIST_LIST | Can view the list of pharmacists | - BACKEND CLIENT ONLY - |
| PHARMACIST_DETAIL | Can view the details of a pharmacist | - BACKEND CLIENT ONLY - |
| PHARMACIST_CREATE | Can create a new pharmacist | - BACKEND CLIENT ONLY - |
| PHARMACIST_UPDATE | Can modify a pharmacist | - BACKEND CLIENT ONLY - |
| PHARMACIST_DELETE | Can delete a pharmacist | - BACKEND CLIENT ONLY - |
| OPERATOR_LIST | Can view the list of operators | - BACKEND CLIENT ONLY - |
| OPERATOR_DETAIL | Can view the details of an operator | - BACKEND CLIENT ONLY - |
| OPERATOR_CREATE | Can create a new operator | - BACKEND CLIENT ONLY - |
| OPERATOR_UPDATE | Can modify an operator | - BACKEND CLIENT ONLY - |
| OPERATOR_DELETE | Can delete an operator | - BACKEND CLIENT ONLY - |
| ESTIMATOR_LIST | Can view the list of estimators | - BACKEND CLIENT ONLY - |
| ESTIMATOR_DETAIL | Can view the details of an estimator | - BACKEND CLIENT ONLY - |
| ESTIMATOR_CREATE | Can create a new estimator | - BACKEND CLIENT ONLY - |
| ESTIMATOR_UPDATE | Can modify an estimator | - BACKEND CLIENT ONLY - |
| ESTIMATOR_DELETE | Can delete an estimator | - BACKEND CLIENT ONLY - |
| CALCULATOR_USE | Can use the simplified calculator | DOCTOR, PHARMACIST, OPERATOR, ESTIMATOR |
| PRODUCT_LIST | Can view the list of products | DOCTOR, PHARMACIST, OPERATOR, ESTIMATOR |
| PRODUCT_DETAIL | Can view the details of a product | DOCTOR, PHARMACIST, OPERATOR, ESTIMATOR |
| PRODUCT_CATEGORY_LIST | Can view the list of product categories | DOCTOR, PHARMACIST, OPERATOR, ESTIMATOR |
| PRODUCT_CATEGORY_DETAIL | Can view the details of a product category | DOCTOR, PHARMACIST, OPERATOR, ESTIMATOR |
| PRODUCT_RANGES_LIST | Can view the list of product ranges | DOCTOR, PHARMACIST, OPERATOR, ESTIMATOR |
| PRODUCT_RANGES_DETAIL | Can view the details of product ranges | DOCTOR, PHARMACIST, OPERATOR, ESTIMATOR |
| PATIENT_LIST | Can view the list of patients | DOCTOR, PHARMACIST |
| PATIENT_DETAIL | Can view the details of a patient | DOCTOR, PHARMACIST |
| PATIENT_CREATE | Can create a new patient | DOCTOR |
| PATIENT_UPDATE | Can modify a patient | DOCTOR |
| PATIENT_DELETE | Can delete a patient | DOCTOR |
| TEMPLATE_LIST | Can view the list of therapy templates | DOCTOR, PHARMACIST, OPERATOR |
| TEMPLATE_DETAIL | Can view the details of a therapy template | DOCTOR, PHARMACIST, OPERATOR |
| THERAPY_LIST | Can view the list of therapies | DOCTOR, PHARMACIST |
| THERAPY_DETAIL | Can view the details of a therapy | DOCTOR, PHARMACIST |
| THERAPY_CREATE | Can create a new therapy | DOCTOR |
| THERAPY_UPDATE | Can modify a therapy | DOCTOR |
| THERAPY_DELETE | Can delete a therapy | DOCTOR |
| THERAPY_CONFIRM | Can confirm a therapy | DOCTOR |
| THERAPY_PRESCRIPTION | Can obtain the prescription of a therapy | DOCTOR |
| THERAPY_PHARMACIST_EDIT | Can modify a therapy as a pharmacist | PHARMACIST |
| THERAPY_TEMP | Can create temporary therapies | DOCTOR, PHARMACIST, OPERATOR |
| DEFAULT_NOMINAL_VALUE_LIST | Can view the list of default nominal values | DOCTOR, PHARMACIST, OPERATOR, ESTIMATOR |