[V11] User Permissions Refactor

[szufisher]

Proposal to refactor user permission based on SAP's authorization object concept

Hi, I’m tempted also to adopt the SAP model too but I think that in a doctype-centric system it might not be an intuitive design. My proposal: Today in ERPNext, the roles are controlled like in the screenshot below. [image] What if we added the ability to include constraints and custom activities as shown in the screenshot below? I think we would have effectively achieved everything that SAP’s authorization model achieves while still working in a familiar framework. [image] Roles could…

how about this new refactor proposal? or how the different use cases works in your design? any possibility we work together and come out a ultimate solution for all identified use cases?