#753 - set up an order system to let eyeo employees file order requests

modules/trac/files/order-permissions.csv

Index: modules/trac/files/order-permissions.csv
===================================================================
new file mode 100644
--- /dev/null
+++ b/modules/trac/files/order-permissions.csv
@@ -0,0 +1,16 @@
+accountants,REPORT_CREATE,TAGS_ADMIN,TICKET_ADMIN,TICKET_INVOICE_RECEIVED,TICKET_MANUAL_PAYMENT_DONE,TICKET_MANUAL_PAYMENT_REQUIRED,TICKET_ORDER_URL,TICKET_PAYMENT_TYPE,TICKET_TRACKING_URL,TIMELINE_VIEW
+buyers,REPORT_ADMIN,TAGS_ADMIN,TICKET_ADMIN,TICKET_BATCH_MODIFY,TICKET_MANUAL_PAYMENT_REQUIRED,TICKET_ORDER_URL,TICKET_PAYMENT_TYPE,TICKET_TRACKING_URL,TIMELINE_VIEW
+staff,TICKET_APPEND,TICKET_CREATE,TICKET_VIEW,TICKET_VIEW_SELF,TIMELINE_VIEW

[Wladimir Palant, 2014/07/22 13:52:24]

SEARCH_VIEW and REPORT_VIEW?

[mathias, 2014/07/24 16:36:49]

This entire file has been taken directly from the attachments in the Trac
ticket. I have to discuss your points with Phill, especially because I can only
guess the intentions behind the permission assignments in this file.

+reviewers,REPORT_ADMIN,TAGS_ADMIN,TICKET_ACCEPT,TICKET_ADMIN,TICKET_BATCH_MODIFY,TICKET_INVOICE_RECEIVED,TICKET_MANUAL_PAYMENT_DONE,TICKET_MANUAL_PAYMENT_REQUIRED,TICKET_ORDER_URL,TICKET_PAYMENT_TYPE,TICKET_TRACKING_URL,TIMELINE_VIEW

[Wladimir Palant, 2014/07/22 13:52:24]

No need to repeat TIMELINE_VIEW everywhere, staff group already has that
permission.

[mathias, 2014/07/24 16:36:49]

See my reply/comment above.

+trev,admin
+philll,admin
+fhd,admin
+trev,reviewers
+philll,staff
+fhd,reviewers
+till,reviewers
+christian,buyers
+nadja,accountants
+admin,TRAC_ADMIN

[Wladimir Palant, 2014/07/22 13:52:24]

This is a group, not a user.

[mathias, 2014/07/24 16:36:49]

AFAIK Trac does not differ, at least not in case of the permissions.

[Wladimir Palant, 2014/07/31 09:46:53]

No, it doesn't - but the permissions for the groups are defined further above.
Anyway, doesn't matter any more with your recent changes.

+arthur,buyers
+Testinger,orderstaff

[Wladimir Palant, 2014/07/22 13:52:24]

I think we decided to always assign users to groups in the administration UI,
keeping this csv file in sync isn't practicable since reapplying it has issues
(it only adds permissions but doesn't remove them).

[mathias, 2014/07/24 16:36:49]

Agreed. Yet this is still not optimal, at least not without making the
production-data available for testing purposes and defining an alternative
(vagrant/puppet) setup mechanism based on that data.