AD03
Permission Management
The permission catalog, the roles that use each permission, and who holds access.
Schema v01 has no permission, permission-group or role-permission table. Access is decided in code; the ledger's PERMISSION_DENIED event (payload: route, role) is the only place a permission shows.
Total Permissions
—
no permission table in schema v01
Module Permissions
—
no permission table, so no module split
Custom Permissions
—
no permission table, so nothing custom
Roles Using
—
no role-permission table
Users with Access
—
no permission table; every user sees every screen today
Permission Denials
askingevents
PERMISSION_DENIED on the ledger (event_type F5.2)
Permissions
NameCodeModuleTypeDescriptionStatusRoles
No permission rows: the catalog the board lists (CUST.VIEW, MAT.CREATE, QT.APPROVE, ...) exists nowhere in schema v01.
What the database does hold
PERMISSION_DENIED eventsasking
permission rowsnot in schema v01
role rows5 enum values
Permissions by Module
Nothing to show yet
No permission table.
Type Distribution
Read / Write / Delete / Approve / Execute
Nothing to show yet
No permission table, so no type on a permission.
Status Distribution
Active / Inactive / Deprecated / Draft
Nothing to show yet
No permission table, so no status on a permission.
Permission Details
roles, users with access, dependencies
Nothing to show yet
No permission row to detail.
Permission Requests
Nothing to show yet
No access-request table in schema v01.
Recent Permission Changes
Nothing to show yet
No permission table and no event type for a permission change; PERMISSION_DENIED is the only permission event.