Udai, While I agree with the idea to simplify the permissions, the reality with the MFI's I've worked with in the past is that their permission requirements are much more granular. Certain values they want staff to enter, others they want other staff members. Then there are all the questions around approvals - not just in approving a loan/client application, but some MFI's would like a process to review changes and approve them. I have even heard of requests to give temporary edit permissions to people, and even that they want to be very granular.
Not sure what the answer is, but I fear going to something simple like you propose will hurt Mifos adoption. r On Sep 27, 2011, at 11:00 AM, Udai Gupta wrote: > SHORT: > If we want this field editable we don't add permission. > If we want permission anyway then we don't at this feature in this release. > > LONG: > If we add these edit fields we should not add separate permission or > configuration for these fields. If we have to create permission based > on fields of a form that it's a big task and shouldn't be included in > this release. If we keep on adding permission and configuration then > it will make things more complex in Mifos. > > Fields based permission makes things complicated when you don't have > supporting framework. > > Usually we should have permission (CRUD - CREAT/READ/UPDATE/DELETE) like > > "Can view center" > "Can create center" > "Can edit center" > "Can delete center" > > Mifos doesn't have notion of delete which is fine, if we go with field > based permissions then things will be like > > "Can view center name" > "Can view center xyz" > 100 more center permissions ... > > We should not go with field/object based security as Mifos code does > not have support for it, these things will make security code cleanup > difficult later. We have done field level security in past but it has > resulted in more damage. > > I would suggest that we stick with CRUD principal for Mifos > permissions. i.e. if a user has edit permission then he can edit > everything related to the center/client. > > Udai > > ------------------------------------------------------------------------------ > All the data continuously generated in your IT infrastructure contains a > definitive record of customers, application performance, security > threats, fraudulent activity and more. Splunk takes this data and makes > sense of it. Business sense. IT sense. Common sense. > http://p.sf.net/sfu/splunk-d2dcopy1 > _______________________________________________ > Mifos-users mailing list > [email protected] > https://lists.sourceforge.net/lists/listinfo/mifos-users --------------------------------------- Ryan Whitney [email protected] US mobile: +1.206.734.5110 global: +1.206.235.4479 I myself am made entirely of flaws, stitched together with good intentions. - Augusten Burroughs ------------------------------------------------------------------------------ All the data continuously generated in your IT infrastructure contains a definitive record of customers, application performance, security threats, fraudulent activity and more. Splunk takes this data and makes sense of it. Business sense. IT sense. Common sense. http://p.sf.net/sfu/splunk-d2dcopy1 _______________________________________________ Mifos-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/mifos-users
