Custom Users & Scopes (v1)

[euanmillar]

Description

Configurable role permissions:

This would involve the creation of custom roles to which permissions (or groups of permissions) could be applied e.g. notify/declare, validate, register, certify, correct, search, certified copy / work queues / performance management

Proposed user scopes are here

Technical: Refactor user roles and scopes so that they are easier to configure and map with state transition
Technical design can be found here

Burkino Faso:
Have introduced add a flag to creare the concept of "secondary" offices by checking the details of the office the user is attached to as part of the user starting a new declaration. If they are attached to a secondary office, only birth and death declaration types are shown.

This can be achieved using User Scopes. Each System User can be given the required scope for what declarations they can create

Design:

Action menu options based on status WIP:
https://www.figma.com/design/O6PevbBv0lApmXWYotR8sf/OpenCRVS-Design-Specifications-v2?node-id=19880-66203&t=O2Lnip0WuiujvtJN-1

Related

• feat!: country configurable user scopes & roles #7301
• Custom, scope-based user roles #7053

Dev tasks

• Move hard-coded role - scope mappings from authentication.ts to country config.

• Modify the current GET /roles endpoint to also include scopes per role. This should be just a static roles.json file being served by CC. Change the returning data model to be as in the following example:

[
  {
    "name": "POLICE_OFFICER",
    "scopes": ["declare"],
    "systemRole": "FIELD_AGENT",
    "label": {
       "id": "userRoles.policeOfficer",
       "defaultMessage": "Police officer",
       "description": "Label for role police officer"
     }
  }
]

• When user authenticates, assign the correct scopes to their JWT token
• More tasks in the feature PR here

[rikukissa]

Related: #7053

[SyedaAfrida]

@jpye-finch 1. Should we be able to unassign from both the menu option and clicking the profile icon

2. Should the steps be same when unassigning another user and unassigning themselves?

[anninawersun]

Uganda requirement: #6270 Senior Registration Officer user required

A Registrar plus:

Can review correction requests (if senior approval required)
Can review revoke and reinstatement requests (after review from the ED and Legal)

[prinzab]

Uganda requirement: #6951 Auditor User

Review performance & reports
View and search records
Add notes/comments to records
Ability to share with other users to inform them of the status of a "flagged" record

[ThierryMyshepherd]

Uganda requirement #8013