Dear Nayan,

Thanks a lot...

Regards
Sendoro


On 2016-08-05 04:21, Nayan Ambali wrote:
Hello Sendoro,

MIfos X platform uses similar concept, permissions are mapped to a role and then role is mapped to user, if you remove the role from a user then user
will loose all the permissions associated with that role.

You can find the documentation at
https://mifosforge.jira.com/wiki/display/docs/Manage+Roles+and+Permissions

-
Nayan Ambali

On Fri, 5 Aug 2016 at 05:59 <send...@singo.co.tz> wrote:

Dear Team,


Presentation by Adhyan remind me a critical issue that was faced by SAP
- ERP. on managing user's permission.... "Please apologies for my
ignorance"

I wonder to know how it is happen in Mifos/Fineract

Best Practices is as follows.

Users - e.g. Ed, Sendoro, Emmanuel etc

Groups - in organization, you may have group of people who are supposed
to play same roles.

Roles - e.g. Cashier, Credit Officer, document verifier etc.

Permissions - e.g can Approve/reject loans, create loans etc...



Best Practices Scanerios.
-------------------------------

Permissions are assigned to roles and never directly to the users/groups

Roles - Assigned to Groups and never directly to users, this means
whenever a user is removed from a group automatically he has missed all
privileges/permissions of the groups and whenever user get to a group
s/he automatically get all roles and privileges in that group

Groups contains users:

Advantages
-it mitigate the risk on leaving a certain privileges to user even if it
was supposed to have been removed et.
-it maintain scalability and integrity of this key and probably risk
area...



Is this how it is being done now? Anyone can direct me to documentation
of this module?


Thanks
Sendoro






Reply via email to