The Lino Welfare Standard User Types¶
Defining user types and their respective permissions is a complex area where it is difficult to get an overview and where it is easy to forget some aspect when deciding about a change. This document is an attempt to fix this problem at least for Lino Welfare by developing a standard set of user types.
The default set of user types for Lino Welfare is defined in the
lino_welfare.modlib.welfare.user_types module. Individual
centers can define their own local user_types_module, Lino does not force you to
use the following.
But we recommend to use the standard set of user types and to join our common effort. If you discover a problem with what’s described hereafter, please contact the responsible author (currently Luc Saffre).
>>> from lino import startup
>>> startup('lino_welfare.projects.gerd.settings.doctests')
>>> from lino.api.doctest import *
The default set of user types for Lino Welfare lives in the
lino.modlib.users.UserTypes choicelist:
>>> rt.show(users.UserTypes, language="en")
...
======= =========== ===============================
value name text
------- ----------- -------------------------------
000 anonymous Anonymous
100 Integration agent
110 Integration agent (Manager)
120 Integration agent (Flexible)
130 Integration agent (Reception)
200 Newcomers consultant
210 Reception clerk
220 Reception clerk (Flexible)
300 Debts consultant
400 Social agent
410 Social agent (Manager)
420 Social agent (Flexible)
430 Social agent (Reception)
500 Accountant
510 Accountant (Manager)
800 Supervisor
900 admin Administrator
910 Security advisor
======= =========== ===============================
A social agent is a user who does individual coaching of clients. Certain privacy-relevant client data is visible only to social agents.
A social staff member is a social agent who has access to more technical information about welfare clients. For example the Miscellaneous panel.
An integration agent is a specialized social agent who works with immigrants who want to integrate into local society. They can access database content specific to integration work: CV, language courses, workshops, …
A flexible integration agent can also assign coaches to clients and create budgets for debts mediation.
A newcomers consultant manages new client applications.
A newcomers operator is a user who is not social agent but can e.g. register newcomers and assign them a coach.
A reception clerk is a user who is not a social agent but receives clients and does certain administrative tasks (in Eupen they call them back office). A flexible reception clerk can also assign coaches to clients.
An accountant is a user who enters invoices, bank statements, payment orders and other ledger operations. The manager variant also has access to configuration.
A site adminstrator has permission for everything.
A supervisor is a backoffice user who can act as others.
The Manager variants of Integration agent, Social agent and
Accountant give some additional permissions like editing contracts
authored by other users, more configuration options, but they are not
a SiteStaff.
The Flexible variants 120, 220 and 420 are designed to be used in centers where they don’t use 100, 200 and 400.
An Integration agent (Manager) has some staff permissions
>>> from lino.core.roles import SiteStaff
>>> from lino_xl.lib.contacts.roles import ContactsStaff
>>> p100 = users.UserTypes.get_by_value('100')
>>> p110 = users.UserTypes.get_by_value('110')
>>> p210 = users.UserTypes.get_by_value('210')
>>> p110.has_required_roles([SiteStaff])
False
>>> p210.has_required_roles([SiteStaff])
False
A reception clerk is a ContactsStaff:
>>> p100.has_required_roles([ContactsStaff])
False
>>> p110.has_required_roles([ContactsStaff])
True
>>> p210.has_required_roles([ContactsStaff])
True
A reception clerk is an OfficeOperator:
>>> from lino_welfare.modlib.welfare.user_types import OfficeOperator
>>> p210.has_required_roles([OfficeOperator])
True
A reception clerk can see the Calendar tab because it
contains the EntriesByClient panel. Since 20180124 also
TasksByProject of that tab.
>>> cal.EntriesByClient.get_view_permission(p210)
True
>>> print(py2rst(pcsw.Clients.detail_layout['calendar']))
**Kalender** (calendar) [visible for 100 110 120 130 200 210 220 300 400 410 420 430 500 510 800 admin 910]:
- **Kalendereinträge** (cal.EntriesByClient)
- **Aufgaben** (cal.TasksByProject)
>>> rt.show(users.UserRoles)
...
=================================== ===== ===== ===== ===== ===== ===== ===== ===== ===== ===== ===== ===== ===== ===== ===== ===== ===== =====
Name 000 100 110 120 130 200 210 220 300 400 410 420 430 500 510 800 900 910
----------------------------------- ----- ----- ----- ----- ----- ----- ----- ----- ----- ----- ----- ----- ----- ----- ----- ----- ----- -----
accounting.LedgerStaff ☑ ☑ ☑
accounting.LedgerUser ☑ ☑ ☑ ☑
aids.AidsStaff ☑ ☑ ☑ ☑ ☑ ☑ ☑ ☑ ☑ ☑ ☑ ☑
aids.AidsUser ☑ ☑ ☑ ☑ ☑ ☑ ☑ ☑ ☑ ☑ ☑ ☑ ☑ ☑ ☑ ☑
beid.BeIdUser ☑ ☑ ☑ ☑ ☑ ☑ ☑ ☑ ☑ ☑ ☑ ☑ ☑ ☑ ☑
cal.CalendarReader ☑ ☑ ☑
cal.GuestOperator ☑ ☑ ☑ ☑ ☑ ☑ ☑ ☑ ☑ ☑ ☑ ☑ ☑ ☑ ☑
cbss.CBSSUser ☑ ☑ ☑ ☑ ☑ ☑ ☑ ☑ ☑ ☑ ☑ ☑ ☑
checkdata.CheckdataUser ☑ ☑ ☑ ☑ ☑ ☑ ☑ ☑ ☑ ☑ ☑ ☑
coachings.CoachingsStaff ☑ ☑ ☑ ☑ ☑ ☑ ☑ ☑ ☑
coachings.CoachingsUser ☑ ☑ ☑ ☑ ☑ ☑ ☑ ☑ ☑ ☑ ☑ ☑ ☑
contacts.ContactsStaff ☑ ☑ ☑ ☑ ☑ ☑ ☑ ☑ ☑ ☑
contacts.ContactsUser ☑ ☑ ☑ ☑ ☑ ☑ ☑ ☑ ☑ ☑ ☑ ☑ ☑ ☑ ☑ ☑
contacts.SimpleContactsUser ☑ ☑ ☑ ☑ ☑ ☑ ☑ ☑ ☑ ☑ ☑ ☑ ☑ ☑ ☑ ☑ ☑
core.Anonymous ☑
core.DataExporter ☑ ☑ ☑ ☑
core.SiteUser ☑ ☑ ☑ ☑ ☑ ☑ ☑ ☑ ☑ ☑ ☑ ☑ ☑ ☑ ☑ ☑ ☑
courses.CoursesTeacher ☑ ☑ ☑ ☑ ☑
courses.CoursesUser ☑ ☑ ☑ ☑ ☑ ☑ ☑ ☑ ☑ ☑ ☑ ☑ ☑ ☑
cv.CareerStaff ☑ ☑ ☑ ☑ ☑
cv.CareerUser ☑ ☑ ☑ ☑ ☑ ☑ ☑
debts.DebtsStaff ☑ ☑
debts.DebtsUser ☑ ☑ ☑ ☑ ☑
excerpts.ExcerptsStaff ☑ ☑
excerpts.ExcerptsUser ☑ ☑ ☑ ☑ ☑ ☑ ☑ ☑ ☑ ☑ ☑ ☑ ☑ ☑ ☑
integ.IntegUser ☑ ☑ ☑ ☑ ☑ ☑ ☑
integ.IntegrationStaff ☑ ☑ ☑ ☑ ☑
newcomers.NewcomersOperator ☑ ☑ ☑ ☑ ☑ ☑ ☑ ☑ ☑
newcomers.NewcomersUser ☑ ☑ ☑ ☑ ☑ ☑ ☑
notes.NotesStaff ☑ ☑ ☑ ☑ ☑
notes.NotesUser ☑ ☑ ☑ ☑ ☑ ☑ ☑ ☑ ☑ ☑ ☑ ☑ ☑ ☑ ☑ ☑ ☑
office.OfficeOperator ☑ ☑ ☑ ☑ ☑ ☑ ☑ ☑ ☑ ☑ ☑ ☑ ☑
office.OfficeStaff ☑ ☑ ☑ ☑ ☑ ☑
office.OfficeUser ☑ ☑ ☑ ☑ ☑ ☑ ☑ ☑ ☑ ☑ ☑ ☑ ☑ ☑
pcsw.SocialCoordinator ☑ ☑ ☑ ☑ ☑
pcsw.SocialStaff ☑ ☑ ☑ ☑ ☑ ☑
pcsw.SocialUser ☑ ☑ ☑ ☑ ☑ ☑ ☑ ☑ ☑ ☑ ☑ ☑
polls.PollsStaff ☑ ☑ ☑ ☑ ☑ ☑
polls.PollsUser ☑ ☑ ☑ ☑ ☑ ☑ ☑ ☑ ☑ ☑ ☑ ☑
search.SiteSearcher ☑ ☑
sepa.SepaStaff ☑ ☑ ☑ ☑ ☑ ☑ ☑ ☑
sepa.SepaUser ☑ ☑ ☑ ☑ ☑ ☑ ☑ ☑ ☑ ☑ ☑ ☑ ☑ ☑ ☑ ☑
users.AuthorshipTaker ☑ ☑ ☑ ☑ ☑ ☑ ☑ ☑ ☑
welfare.Accountant ☑
welfare.AccountantManager ☑
welfare.DebtsConsultant ☑
welfare.IntegrationAgent ☑ ☑ ☑ ☑
welfare.IntegrationAgentFlexible ☑ ☑
welfare.IntegrationAgentManager ☑ ☑ ☑
welfare.IntegrationAgentReception ☑
welfare.NewcomersConsultant ☑
welfare.ReceptionClerk ☑
welfare.ReceptionClerkFlexible ☑
welfare.SecurityAdvisor ☑
welfare.SiteAdmin ☑ ☑
welfare.SocialAgent ☑ ☑
welfare.SocialAgentManager ☑
welfare.SocialAgentReception ☑
welfare.Supervisor ☑
xcourses.CoursesStaff ☑ ☑ ☑ ☑ ☑
xcourses.CoursesUser ☑ ☑ ☑ ☑ ☑ ☑ ☑
=================================== ===== ===== ===== ===== ===== ===== ===== ===== ===== ===== ===== ===== ===== ===== ===== ===== ===== =====
User types versus user roles¶
A user type is an arbitrary choice of user roles made available for a given application.
For example the lino_welfare.modlib.isip.ContractsByClient
table is visible for users having the IntegUser or SocialCoordinator
role:
>>> list(isip.ContractsByClient.required_roles)
[(<class 'lino_welfare.modlib.integ.roles.IntegUser'>, <class 'lino_welfare.modlib.pcsw.roles.SocialCoordinator'>)]
>>> print(visible_for(isip.ContractsByClient))
100 110 120 130 210 400 410 420 430 admin 910
The user role “Expert”¶
In Welfare we don’t want Lino to automatically create persons from learning comboboxes. Except for experts.
The merge action is only for experts.
The user rule “Data exporter”¶
Print a table to PDF. Export a table to XLS.