Epic: Custom Users and Scopes

euanmillar commented 8 months ago

Description

Configurable role permissions:

This would involve the creation of custom roles to which permissions (or groups of permissions) could be applied e.g. notify/declare, validate, register, certify, correct, search, certified copy / work queues / performance management

Proposed user scopes are here

Technical: Refactor user roles and scopes so that they are easier to configure and map with state transition Technical design can be found here

Burkino Faso: Have introduced add a flag to creare the concept of "secondary" offices by checking the details of the office the user is attached to as part of the user starting a new declaration. If they are attached to a secondary office, only birth and death declaration types are shown.

This can be achieved using User Scopes. Each System User can be given the required scope for what declarations they can create

Design:

Action menu options based on status WIP: https://www.figma.com/design/O6PevbBv0lApmXWYotR8sf/OpenCRVS-Design-Specifications-v2?node-id=19880-66203&t=O2Lnip0WuiujvtJN-1

Dev tasks

[x] Move hard-coded role - scope mappings from authentication.ts to country config.
[x] Modify the current GET /roles endpoint to also include scopes per role. This should be just a static roles.json file being served by CC. Change the returning data model to be as in the following example:

[
  {
    "name": "POLICE_OFFICER",
    "scopes": ["declare"],
    "systemRole": "FIELD_AGENT",
    "label": {
       "id": "userRoles.policeOfficer",
       "defaultMessage": "Police officer",
       "description": "Label for role police officer"
     }
  }
]

[ ] When user authenticates, assign the correct scopes to their JWT token
More tasks in the feature PR here

rikukissa commented 3 months ago

SyedaAfrida commented 2 months ago

@jpye-finch 1. Should we be able to unassign from both the menu option and clicking the profile icon

Should the steps be same when unassigning another user and unassigning themselves?

opencrvs / opencrvs-core