851223 - [story] Create a permissions model for viewing metric reports

Status: RESOLVED INCOMPLETE

(Tracking :: User Story, defect)

Description

[David Bialer [:dbialer]]

Stories (multiple)

There are 3 types of permissions:
STATS - controls level of access to financial or non-financial information
Region - controls access to which regions a person has access to.
Carriers - controls access to which carriers, within a region (a subset), a person has access to.


As an STATSADMIN I would like to have access to all information including financial and non-financial and be able to assign roles to others.
As a STATSSTAFF I would like to have access to all non-financial information in stats reports.

As a GLOBAL I would like to have permission to see all regions and aggregate those into reports.
AS a REGIONAL I would like to have permissions to only reports that are within the regions that have been selected for me.

AS an ALLMNO I would like to have permission to reports for all carriers across the regions that have been selected for me and within my permissions for financial.
As an MNO I would like to have permission to reports for only the carriers across the regions that have been selected for me within my permission for financial information.

---
FROM PRD




Permission Model
The following describes a permission model around data access to metric information.
These functions are broken into five different permission types, each with two different permission levels.
Financial Permissions:

    Stats Admins (ADMIN) – Have access to all metric information.  Additionally, they may assign roles to other people.
    Stats Staff (STAFF) – Have access to non-financial information only.

Regional Permission:

    Regional Stats Admins (GLOBAL)– Have access to all information but limited to a Region and Carrier (if any).  
    Regional Stats Staff (REGION) – Have non-financial access to information for a particular set of regions.

In this case GLOBAL is the Superset of Region (all regions).  These are selected by defined regions (countries typically).
Carrier Permissions:

    All Carriers (ALLMNO)– Have access to all information but limited to a Region and Carrier (if any).  
    Select Carriers  (MNO) – Have non-financial access to information for a particular set of carriers in a region.  One type of carrier is (NONE) - which means there is no carrier, which may be the case for most regions.  MNO are Mobile Network Operators.

ALLMNO

Comment 1

[David Bialer [:dbialer]]

TO clarify - these are about metric reports around regions and carriers, not around individual apps.  Metric reports around individual apps should also see if someone is the owner of that app or an admin, in which case the app reports would be limited by permissions around financial info, region and carrier.