Access & authorization
Users are mainly granted access through permissions, roles (groups of permissions) or with specific authorizations.
Permissions
Users are granted access mainly through permissions.
These permissions control most aspects of the ERP system, which include what pages can be visited, what entries can be viewed / deleted / created, which links are displayed in the menu...
Regular permissions provide complete access, while permissions with the "authorized" suffix grant limited access.
Main types of permissions, that exist for each table, are Create, View, Update, Delete, and Menu.
Roles
Roles are primarily used to group permissions, that are often assigned together under a single name.
They can also be used in an informational manner, to essentially "tag" a user as for example, an employee.
Specific authorizationsAuthorizations