UNPKG

@ministryofjustice/hmpps-prison-permissions-lib

Version:

A library to centralise the process of determining whether a user should have access to create/read/update/delete a prison resource, for example, accessing a prisoner's Prisoner Profile.

github.com/ministryofjustice/hmpps-prison-permissions-lib

ministryofjustice/hmpps-prison-permissions-lib

103 lines (61 loc) • 2.77 kB
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
## Overview permissions --- accessCode = baseCheck ✅ --- courtCases.view = prisoner:person-sentence-calculation:read ✅ this is badly named in prisoner profile - more to do with whether user can access calculate release dates... drives whether the panel at the top of the overview with release date calculation and link is shown: https://github.com/ministryofjustice/hmpps-prisoner-profile/blob/main/server/controllers/overviewController.ts#L67 --- courtCases.edit = prisoner:person-sentence-calculation:adjustments:edit ✅ this is again badly named in prisoner profile - actually whether a user can make adjustments - drives what the link in the release date calculation block shows.https://github.com/ministryofjustice/hmpps-prisoner-profile/blob/main/server/controllers/utils/overviewController/mapCourtCaseSummary.ts#L22 --- money.view = prisoner:prisoner-money:read ✅ --- adjudications.view = prisoner:prisoner-adjudications:read ✅ --- visits.view = prisoner:prisoner-visits-and-visitors:read ✅ --- incentives.view = prisoner:prisoner-incentives:read ✅ --- category.edit = prisoner:person-prison-category:edit --- calculateReleaseDates.edit = prisoner:person-sentence-calculation:read ✅ (same as courtCases.view above) --- Case notes permissions are a bit of a mess, here's the summary: roleHelpers.ts - canViewCaseNotes -> drives which tabs are shown in the profile -> not in step with what the permissions guard is checking -> hopefully this will get replaced at some point with prisoner:case-notes:read ✅ roleHelpers.ts - canAddCaseNotes -> drives whether the 'Add case note' button is visible -> not in step with what the permissions guard is checking -> hopefully this will get replaced at some point with prisoner:case-notes:edit ✅ caseNotes.edit -> drives whether the 'Add case note' action link is shown -> not in step with what the permissions guard is checking -> hopefully this will get replaced at some point with prisoner:case-notes:edit ✅ getCaseNotesAccessStatusCode = prisoner:case-notes:read ✅ --- keyworker.edit ❌ This shouldn't be a permission - this just drives an action link on the overview to create a keyworker session case note but anyone can do this if they can add a case note for a prisoner. Need to rip out the keyworker check from this library. --- appointment.edit = prisoner:appointment:edit ✅ --- useOfForce.edit = prisoner:use-of-force:edit ✅ --- activity.edit = prisoner:activity:edit ✅ --- pathfinder.view = prisoner:pathfinder:read ✅ pathfinder.edit = prisoner:pathfinder:edit ✅ --- soc.view = prisoner:soc:read ✅ soc.edit = prisoner:soc:edit ✅ --- probationDocuments.view = prisoner:probation-documents:read ✅ --- csip.view = prisoner:csip:read ✅