Skip to main content

User Permissions Overview

This document outlines the various user and club-related permissions within the system. Each permission defines specific actions that a user can perform, ranging from managing accounts to handling club information, attendance, and student management. These permissions are grouped into relevant categories to streamline access and administrative functions.

User Group Permissions​

The following permissions are related to user account management, allowing users to control their own accounts as well as manage others' accounts if permitted:

  • CHANGE_USERNAME_OWN: Allows a user to change their own username.
  • CHANGE_PASSWORD_OWN: Allows a user to change their own password.
  • BLOCK_ACCOUNT: Enables a user to block or unblock their own account.
  • CHANGE_USERNAME_ALL: Allows a user to change the username of any user.
  • CHANGE_PASSWORD_ALL: Allows a user to change the password of any user.
  • DELETE_ACCOUNT: Grants the ability to delete a user’s account.
  • CREATE_ACCOUNT: Permits the creation of a new account.

Club Information Permissions​

These permissions relate to handling club details and requests for changes to club operations and structure:

  • REQUEST_INFORMATION: Allows a user to request changes to their own club’s details, including the host class, club schedule, club leader, and club name.
  • REVIEW_REQUEST: Grants the ability to approve or reject requests to change club information.
  • BEHAVIOUR_POINT_OPERATION: Enables a user to edit the behavior points associated with their club.
  • VIEW_INFORMATION_G1: Allows a user to view all club information for the G1 division.
  • VIEW_INFORMATION_G2: Allows a user to view all club information for the G2 division.
  • VIEW_INFORMATION_AS: Allows a user to view all club information for the AS division.
  • VIEW_INFORMATION_A2: Allows a user to view all club information for the A2 division.
  • VIEW_INFORMATION_IB: Allows a user to view all club information for the IB division.
  • REQUEST_INFORMATION_ALL: Allows a user to request changes for all clubs' details, including host class, club schedule, club leader, and club name.
  • VIEW_REQUEST_OWN: Enables a user to view all change requests submitted by their own club.
  • VIEW_REQUEST_ALL: Allows a user to view all requests made by all clubs.
  • VIEW_INFORMATION_ALL: Grants access to view all club information across divisions.

Club Attendance Permissions​

These permissions focus on managing club attendance, including leave requests and grading:

  • TAKE_ATTENDANCE_OWN: Allows a user to take attendance for their own club’s students, marking them as present, absent, on leave, etc.
  • GRADE_CLUB: Enables a user to grade the club based on various criteria.
  • REQUEST_LEAVE_OWN: Allows a user to request leave for their own club’s activities.
  • REVIEW_LEAVE: Grants the ability to approve or reject leave requests.
  • VIEW_LEAVE_OWN: Allows a user to view their own club’s leave request history.
  • TAKE_ATTENDANCE_ALL: Allows a user to take attendance for all clubs' students.
  • REQUEST_LEAVE_ALL: Enables a user to request leave for all clubs’ activities.
  • VIEW_GRADE_OWN: Allows a user to view the grades they have given.
  • VIEW_GRADE_ALL: Allows a user to view grades given by all users.
  • VIEW_LEAVE_ALL: Grants access to view all clubs' leave request histories.

Club Students Permissions​

These permissions involve managing student memberships and information within clubs:

  • EDIT_STUDENT_OWN: Allows a user to add or remove students from their own club.
  • EDIT_STUDENT_INFORMATION: Enables a user to edit student information, such as name, contact details, or other relevant information.
  • EDIT_STUDENT_ALL: Grants the ability to add or remove students across all clubs.

By defining and managing these permissions effectively, the system ensures that users have the appropriate level of access and control over the accounts, club information, attendance, and student management functions they are responsible for. These permissions also help maintain the security and proper functioning of the system by ensuring actions are performed by authorized individuals.