2 -- Run this script immediately after a normal installation
3 -- (assuming LP bug 782268 is rejected) in order to implement
4 -- the new permission groups.
7 -- Alter the permission hierarchy
9 UPDATE permission.grp_tree SET description = oils_i18n_gettext(10, 'Can do anything at the Branch level', 'pgt', 'description') WHERE id = 10;
11 INSERT INTO permission.grp_tree (id, name, parent, description, perm_interval, usergroup, application_perm) VALUES
12 (8, oils_i18n_gettext(8, 'Cataloging Administrator', 'pgt', 'name'), 3, NULL, '3 years', TRUE, 'group_application.user.staff.cat_admin');
13 INSERT INTO permission.grp_tree (id, name, parent, description, perm_interval, usergroup, application_perm) VALUES
14 (9, oils_i18n_gettext(9, 'Circulation Administrator', 'pgt', 'name'), 3, NULL, '3 years', TRUE, 'group_application.user.staff.circ_admin');
15 INSERT INTO permission.grp_tree (id, name, parent, description, perm_interval, usergroup, application_perm) VALUES
16 (11, oils_i18n_gettext(11, 'Serials', 'pgt', 'name'), 3,
17 oils_i18n_gettext(11, 'Serials (includes admin features)', 'pgt', 'description'), '3 years', TRUE, 'group_application.user.staff.serials');
18 INSERT INTO permission.grp_tree (id, name, parent, description, perm_interval, usergroup, application_perm) VALUES
19 (12, oils_i18n_gettext(12, 'System Administrator', 'pgt', 'name'), 3,
20 oils_i18n_gettext(12, 'Can do anything at the System level', 'pgt', 'description'), '3 years', TRUE, 'group_application.user.staff.admin.system_admin');
21 INSERT INTO permission.grp_tree (id, name, parent, description, perm_interval, usergroup, application_perm) VALUES
22 (13, oils_i18n_gettext(13, 'Global Administrator', 'pgt', 'name'), 3,
23 oils_i18n_gettext(13, 'Can do anything at the Consortium level', 'pgt', 'description'), '3 years', TRUE, 'group_application.user.staff.admin.global_admin');
24 INSERT INTO permission.grp_tree (id, name, parent, description, perm_interval, usergroup, application_perm) VALUES
25 (14, oils_i18n_gettext(14, 'Data Review', 'pgt', 'name'), 3, NULL, '3 years', TRUE, 'group_application.user.staff.data_review');
26 INSERT INTO permission.grp_tree (id, name, parent, description, perm_interval, usergroup, application_perm) VALUES
27 (15, oils_i18n_gettext(15, 'Volunteers', 'pgt', 'name'), 3, NULL, '3 years', TRUE, 'group_application.user.staff.volunteers');
29 SELECT SETVAL('permission.grp_tree_id_seq'::TEXT, (SELECT MAX(id) FROM permission.grp_tree));
32 -- Wipe out existing permissions
34 DELETE FROM permission.usr_grp_map WHERE usr <> 1;
37 -- Add basic user permissions to the Users group
39 INSERT INTO permission.grp_perm_map (grp, perm, depth, grantable)
41 pgt.id, perm.id, aout.depth, FALSE
43 permission.grp_tree pgt,
44 permission.perm_list perm,
45 actor.org_unit_type aout
47 pgt.name = 'Users' AND
48 aout.name = 'Consortium' AND
51 'CREATE_MY_CONTAINER',
56 'user_request.create');
59 -- Add basic user permissions to the Data Review group
61 INSERT INTO permission.grp_perm_map (grp, perm, depth, grantable)
63 pgt.id, perm.id, aout.depth, FALSE
65 permission.grp_tree pgt,
66 permission.perm_list perm,
67 actor.org_unit_type aout
69 pgt.name = 'Data Review' AND
70 aout.name = 'Consortium' AND
72 'CREATE_COPY_TRANSIT',
81 'VIEW_USER_FINES_SUMMARY',
82 'VIEW_USER_TRANSACTIONS',
86 INSERT INTO permission.grp_perm_map (grp, perm, depth, grantable)
88 pgt.id, perm.id, aout.depth, FALSE
90 permission.grp_tree pgt,
91 permission.perm_list perm,
92 actor.org_unit_type aout
94 pgt.name = 'Data Review' AND
95 aout.name = 'System' AND
99 'CREATE_IN_HOUSE_USE',
100 'CREATE_TRANSACTION',
107 -- Add basic staff permissions to the Staff group
109 INSERT INTO permission.grp_perm_map (grp, perm, depth, grantable)
111 pgt.id, perm.id, aout.depth, FALSE
113 permission.grp_tree pgt,
114 permission.perm_list perm,
115 actor.org_unit_type aout
117 pgt.name = 'Staff' AND
118 aout.name = 'Consortium' AND
121 'CREATE_CONTAINER_ITEM',
122 'CREATE_COPY_TRANSIT',
123 'CREATE_HOLD_NOTIFICATION',
124 'CREATE_TRANSACTION',
127 'DELETE_CONTAINER_ITEM',
128 'group_application.user',
129 'group_application.user.patron',
130 'REGISTER_WORKSTATION',
131 'REMOTE_Z3950_QUERY',
137 'VIEW_COPY_CHECKOUT_HISTORY',
140 'VIEW_HOLD_NOTIFICATION',
146 'VIEW_VOLUME_NOTES');
148 INSERT INTO permission.grp_perm_map (grp, perm, depth, grantable)
150 pgt.id, perm.id, aout.depth, FALSE
152 permission.grp_tree pgt,
153 permission.perm_list perm,
154 actor.org_unit_type aout
156 pgt.name = 'Staff' AND
157 aout.name = 'System' AND
164 'VIEW_PERMIT_CHECKOUT',
166 'VIEW_USER_FINES_SUMMARY',
167 'VIEW_USER_TRANSACTIONS');
169 INSERT INTO permission.grp_perm_map (grp, perm, depth, grantable)
171 pgt.id, perm.id, aout.depth, FALSE
173 permission.grp_tree pgt,
174 permission.perm_list perm,
175 actor.org_unit_type aout
177 pgt.name = 'Staff' AND
178 aout.name = 'Branch' AND
183 'COPY_TRANSIT_RECEIVE',
185 'CREATE_IN_HOUSE_USE',
187 'RENEW_HOLD_OVERRIDE',
193 -- Add basic cataloguing permissions to the Catalogers group
195 INSERT INTO permission.grp_perm_map (grp, perm, depth, grantable)
197 pgt.id, perm.id, aout.depth, FALSE
199 permission.grp_tree pgt,
200 permission.perm_list perm,
201 actor.org_unit_type aout
203 pgt.name = 'Catalogers' AND
204 aout.name = 'Consortium' AND
207 'CREATE_BIB_IMPORT_QUEUE',
208 'CREATE_IMPORT_ITEM',
211 'DELETE_BIB_IMPORT_QUEUE',
212 'DELETE_IMPORT_ITEM',
215 'IMPORT_ACQ_LINEITEM_BIB_RECORD',
217 'MERGE_AUTH_RECORDS',
219 'UPDATE_AUTHORITY_IMPORT_QUEUE',
220 'UPDATE_AUTHORITY_RECORD_NOTE',
221 'UPDATE_BIB_IMPORT_QUEUE',
225 'VIEW_AUTHORITY_RECORD_NOTES');
227 INSERT INTO permission.grp_perm_map (grp, perm, depth, grantable)
229 pgt.id, perm.id, aout.depth, FALSE
231 permission.grp_tree pgt,
232 permission.perm_list perm,
233 actor.org_unit_type aout
235 pgt.name = 'Catalogers' AND
236 aout.name = 'System' AND
240 'CREATE_MFHD_RECORD',
242 'CREATE_VOLUME_NOTE',
245 'DELETE_MFHD_RECORD',
247 'DELETE_VOLUME_NOTE',
248 'MARK_ITEM_AVAILABLE',
250 'MARK_ITEM_CHECKED_OUT',
252 'MARK_ITEM_IN_PROCESS',
253 'MARK_ITEM_IN_TRANSIT',
256 'MARK_ITEM_ON_HOLDS_SHELF',
257 'MARK_ITEM_ON_ORDER',
258 'MARK_ITEM_RESHELVING',
261 'UPDATE_IMPORT_ITEM',
262 'UPDATE_MFHD_RECORD',
264 'UPDATE_VOLUME_NOTE',
265 'VIEW_SERIAL_SUBSCRIPTION');
268 -- Add advanced cataloguing permissions to the Cataloging Admin group
270 INSERT INTO permission.grp_perm_map (grp, perm, depth, grantable)
272 pgt.id, perm.id, aout.depth, TRUE
274 permission.grp_tree pgt,
275 permission.perm_list perm,
276 actor.org_unit_type aout
278 pgt.name = 'Cataloging Admin' AND
279 aout.name = 'Consortium' AND
281 'ADMIN_IMPORT_ITEM_ATTR_DEF',
282 'ADMIN_MERGE_PROFILE',
283 'CREATE_AUTHORITY_IMPORT_IMPORT_DEF',
284 'CREATE_BIB_IMPORT_FIELD_DEF',
286 'CREATE_IMPORT_ITEM_ATTR_DEF',
287 'CREATE_IMPORT_TRASH_FIELD',
288 'CREATE_MERGE_PROFILE',
289 'DELETE_AUTHORITY_IMPORT_IMPORT_FIELD_DEF',
291 'DELETE_IMPORT_ITEM_ATTR_DEF',
292 'DELETE_IMPORT_TRASH_FIELD',
293 'DELETE_MERGE_PROFILE',
294 'UPDATE_AUTHORITY_IMPORT_IMPORT_FIELD_DEF',
295 'UPDATE_BIB_IMPORT_IMPORT_FIELD_DEF',
296 'UPDATE_IMPORT_ITEM_ATTR_DEF',
297 'UPDATE_IMPORT_TRASH_FIELD',
298 'UPDATE_MERGE_PROFILE');
300 INSERT INTO permission.grp_perm_map (grp, perm, depth, grantable)
302 pgt.id, perm.id, aout.depth, TRUE
304 permission.grp_tree pgt,
305 permission.perm_list perm,
306 actor.org_unit_type aout
308 pgt.name = 'Cataloging Admin' AND
309 aout.name = 'System' AND
311 'CREATE_COPY_STAT_CAT',
312 'CREATE_COPY_STAT_CAT_ENTRY',
313 'CREATE_COPY_STAT_CAT_ENTRY_MAP',
315 'SHARE_REPORT_FOLDER',
316 'UPDATE_COPY_LOCATION',
317 'UPDATE_COPY_STAT_CAT',
318 'UPDATE_COPY_STAT_CAT_ENTRY',
319 'VIEW_REPORT_OUTPUT');
322 -- Add basic circulation permissions to the Circulators group
324 INSERT INTO permission.grp_perm_map (grp, perm, depth, grantable)
326 pgt.id, perm.id, aout.depth, FALSE
328 permission.grp_tree pgt,
329 permission.perm_list perm,
330 actor.org_unit_type aout
332 pgt.name = 'Circulators' AND
333 aout.name = 'Branch' AND
335 'ADMIN_BOOKING_RESERVATION',
336 'ADMIN_BOOKING_RESOURCE',
337 'ADMIN_BOOKING_RESOURCE_ATTR',
338 'ADMIN_BOOKING_RESOURCE_ATTR_MAP',
339 'ADMIN_BOOKING_RESOURCE_ATTR_VALUE',
340 'ADMIN_BOOKING_RESOURCE_TYPE',
342 'MARK_ITEM_AVAILABLE',
344 'MARK_ITEM_CHECKED_OUT',
346 'MARK_ITEM_IN_PROCESS',
347 'MARK_ITEM_IN_TRANSIT',
350 'MARK_ITEM_ON_HOLDS_SHELF',
351 'MARK_ITEM_ON_ORDER',
352 'MARK_ITEM_RESHELVING',
355 'REMOVE_USER_GROUP_LINK',
356 'SET_CIRC_CLAIMS_RETURNED',
357 'SET_CIRC_CLAIMS_RETURNED.override',
361 'UPDATE_PATRON_CLAIM_NEVER_CHECKED_OUT_COUNT',
362 'UPDATE_PATRON_CLAIM_RETURN_COUNT',
363 'UPDATE_PAYMENT_NOTE',
364 'UPDATE_PICKUP_LIB FROM_TRANSIT',
365 'UPDATE_PICKUP_LIB_FROM_HOLDS_SHELF',
366 'VIEW_GROUP_PENALTY_THRESHOLD',
367 'VIEW_STANDING_PENALTY',
371 INSERT INTO permission.grp_perm_map (grp, perm, depth, grantable)
373 pgt.id, perm.id, aout.depth, FALSE
375 permission.grp_tree pgt,
376 permission.perm_list perm,
377 actor.org_unit_type aout
379 pgt.name = 'Circulators' AND
380 aout.name = 'System' AND
382 'ABORT_REMOTE_TRANSIT',
384 'CAPTURE_RESERVATION',
385 'CIRC_CLAIMS_RETURNED.override',
386 'CIRC_EXCEEDS_COPY_RANGE.override',
387 'CIRC_OVERRIDE_DUE_DATE',
388 'CIRC_PERMIT_OVERRIDE',
389 'COPY_ALERT_MESSAGE.override',
390 'COPY_BAD_STATUS.override',
391 'COPY_CIRC_NOT_ALLOWED.override',
392 'COPY_IS_REFERENCE.override',
393 'COPY_NEEDED_FOR_HOLD.override',
394 'COPY_NOT_AVAILABLE.override',
395 'COPY_STATUS_LOST.override',
396 'COPY_STATUS_MISSING.override',
397 'CREATE_DUPLICATE_HOLDS',
398 'CREATE_USER_GROUP_LINK',
400 'HOLD_EXISTS.override',
401 'HOLD_ITEM_CHECKED_OUT.override',
403 'ITEM_AGE_PROTECTED.override',
404 'ITEM_ON_HOLDS_SHELF.override',
405 'MAX_RENEWALS_REACHED.override',
406 'OVERRIDE_HOLD_HAS_LOCAL_COPY',
407 'PATRON_EXCEEDS_CHECKOUT_COUNT.override',
408 'PATRON_EXCEEDS_FINES.override',
409 'PATRON_EXCEEDS_OVERDUE_COUNT.override',
410 'RETRIEVE_RESERVATION_PULL_LIST',
414 -- Add advanced circulation permissions to the Circulation Admin group
416 INSERT INTO permission.grp_perm_map (grp, perm, depth, grantable)
418 pgt.id, perm.id, aout.depth, TRUE
420 permission.grp_tree pgt,
421 permission.perm_list perm,
422 actor.org_unit_type aout
424 pgt.name = 'Circulation Admin' AND
425 aout.name = 'Branch' AND
429 INSERT INTO permission.grp_perm_map (grp, perm, depth, grantable)
431 pgt.id, perm.id, aout.depth, TRUE
433 permission.grp_tree pgt,
434 permission.perm_list perm,
435 actor.org_unit_type aout
437 pgt.name = 'Circulation Admin' AND
438 aout.name = 'Consortium' AND
440 'ADMIN_MAX_FINE_RULE',
441 'CREATE_CIRC_DURATION',
442 'DELETE_CIRC_DURATION',
443 'UPDATE_CIRC_DURATION',
444 'UPDATE_NET_ACCESS_LEVEL',
445 'VIEW_CIRC_MATRIX_MATCHPOINT',
446 'VIEW_HOLD_MATRIX_MATCHPOINT');
448 INSERT INTO permission.grp_perm_map (grp, perm, depth, grantable)
450 pgt.id, perm.id, aout.depth, TRUE
452 permission.grp_tree pgt,
453 permission.perm_list perm,
454 actor.org_unit_type aout
456 pgt.name = 'Circulation Admin' AND
457 aout.name = 'System' AND
459 'ADMIN_BOOKING_RESERVATION',
460 'ADMIN_BOOKING_RESERVATION_ATTR_MAP',
461 'ADMIN_BOOKING_RESERVATION_ATTR_VALUE_MAP',
462 'ADMIN_BOOKING_RESOURCE',
463 'ADMIN_BOOKING_RESOURCE_ATTR',
464 'ADMIN_BOOKING_RESOURCE_ATTR_MAP',
465 'ADMIN_BOOKING_RESOURCE_ATTR_VALUE',
466 'ADMIN_BOOKING_RESOURCE_TYPE',
467 'ADMIN_COPY_LOCATION_ORDER',
468 'ADMIN_HOLD_CANCEL_CAUSE',
472 'COPY_TRANSIT_RECEIVE',
474 'CREATE_BILLING_TYPE',
475 'CREATE_NON_CAT_TYPE',
476 'CREATE_PATRON_STAT_CAT',
477 'CREATE_PATRON_STAT_CAT_ENTRY',
478 'CREATE_PATRON_STAT_CAT_ENTRY_MAP',
479 'CREATE_USER_GROUP_LINK',
480 'DELETE_BILLING_TYPE',
481 'DELETE_NON_CAT_TYPE',
482 'DELETE_PATRON_STAT_CAT',
483 'DELETE_PATRON_STAT_CAT_ENTRY',
484 'DELETE_PATRON_STAT_CAT_ENTRY_MAP',
486 'group_application.user.staff',
488 'MARK_ITEM_AVAILABLE',
490 'MARK_ITEM_CHECKED_OUT',
492 'MARK_ITEM_IN_PROCESS',
493 'MARK_ITEM_IN_TRANSIT',
496 'MARK_ITEM_ON_HOLDS_SHELF',
497 'MARK_ITEM_ON_ORDER',
498 'MARK_ITEM_RESHELVING',
500 'money.collections_tracker.create',
501 'money.collections_tracker.delete',
505 'REMOVE_USER_GROUP_LINK',
506 'SET_CIRC_CLAIMS_RETURNED',
507 'SET_CIRC_CLAIMS_RETURNED.override',
512 'UPDATE_NON_CAT_TYPE',
513 'UPDATE_PATRON_CLAIM_NEVER_CHECKED_OUT_COUNT',
514 'UPDATE_PATRON_CLAIM_RETURN_COUNT',
515 'UPDATE_PICKUP_LIB_FROM_HOLDS_SHELF',
516 'UPDATE_PICKUP_LIB_FROM_TRANSIT',
518 'VIEW_REPORT_OUTPUT',
519 'VIEW_STANDING_PENALTY',
524 -- Add basic sys admin permissions to the Local Administrator group
526 INSERT INTO permission.grp_perm_map (grp, perm, depth, grantable)
528 pgt.id, perm.id, aout.depth, TRUE
530 permission.grp_tree pgt,
531 permission.perm_list perm,
532 actor.org_unit_type aout
534 pgt.name = 'Local Administrator' AND
535 aout.name = 'Branch' AND
540 -- Add administration permissions to the System Administrator group
542 INSERT INTO permission.grp_perm_map (grp, perm, depth, grantable)
544 pgt.id, perm.id, aout.depth, TRUE
546 permission.grp_tree pgt,
547 permission.perm_list perm,
548 actor.org_unit_type aout
550 pgt.name = 'System Administrator' AND
551 aout.name = 'System' AND
555 INSERT INTO permission.grp_perm_map (grp, perm, depth, grantable)
557 pgt.id, perm.id, aout.depth, FALSE
559 permission.grp_tree pgt,
560 permission.perm_list perm,
561 actor.org_unit_type aout
563 pgt.name = 'System Administrator' AND
564 aout.name = 'Consortium' AND
565 perm.code ~ '^VIEW_TRIGGER';
568 -- Add administration permissions to the Global Administrator group
570 INSERT INTO permission.grp_perm_map (grp, perm, depth, grantable)
572 pgt.id, perm.id, aout.depth, TRUE
574 permission.grp_tree pgt,
575 permission.perm_list perm,
576 actor.org_unit_type aout
578 pgt.name = 'Global Administrator' AND
579 aout.name = 'Consortium' AND
584 -- Add basic acquisitions permissions to the Acquisitions group
586 SELECT SETVAL('permission.grp_perm_map_id_seq'::TEXT, (SELECT MAX(id) FROM permission.grp_perm_map));
588 INSERT INTO permission.grp_perm_map (grp, perm, depth, grantable)
590 pgt.id, perm.id, aout.depth, FALSE
592 permission.grp_tree pgt,
593 permission.perm_list perm,
594 actor.org_unit_type aout
596 pgt.name = 'Acquisitions' AND
597 aout.name = 'Consortium' AND
600 'CREATE_BIB_IMPORT_QUEUE',
601 'CREATE_IMPORT_ITEM',
605 'CREATE_PURCHASE_ORDER',
606 'DELETE_BIB_IMPORT_QUEUE',
607 'DELETE_IMPORT_ITEM',
610 'DELETE_VOLUME_NOTE',
612 'IMPORT_ACQ_LINEITEM_BIB_RECORD',
616 'MANAGE_FUNDING_SOURCE',
618 'MARK_ITEM_AVAILABLE',
620 'MARK_ITEM_CHECKED_OUT',
622 'MARK_ITEM_IN_PROCESS',
623 'MARK_ITEM_IN_TRANSIT',
626 'MARK_ITEM_ON_HOLDS_SHELF',
627 'MARK_ITEM_ON_ORDER',
628 'MARK_ITEM_RESHELVING',
629 'RECEIVE_PURCHASE_ORDER',
631 'UPDATE_BIB_IMPORT_QUEUE',
634 'UPDATE_FUND_ALLOCATION',
635 'UPDATE_FUNDING_SOURCE',
636 'UPDATE_IMPORT_ITEM',
640 'user_request.delete',
641 'user_request.update',
643 'VIEW_ACQ_FUND_ALLOCATION_PERCENT',
644 'VIEW_ACQ_FUNDING_SOURCE',
646 'VIEW_FUND_ALLOCATION',
647 'VIEW_FUNDING_SOURCE',
653 'VIEW_PURCHASE_ORDER',
654 'VIEW_REPORT_OUTPUT');
657 -- Add acquisitions administration permissions to the Acquisitions Admin group
659 INSERT INTO permission.grp_perm_map (grp, perm, depth, grantable)
661 pgt.id, perm.id, aout.depth, TRUE
663 permission.grp_tree pgt,
664 permission.perm_list perm,
665 actor.org_unit_type aout
667 pgt.name = 'Acquisitions Administrator' AND
668 aout.name = 'Consortium' AND
670 'ACQ_XFER_MANUAL_DFUND_AMOUNT',
671 'ADMIN_ACQ_CANCEL_CAUSE',
673 'ADMIN_ACQ_CLAIM_EVENT_TYPE',
674 'ADMIN_ACQ_CLAIM_TYPE',
675 'ADMIN_ACQ_DISTRIB_FORMULA',
676 'ADMIN_ACQ_FISCAL_YEAR',
678 'ADMIN_ACQ_FUND_ALLOCATION_PERCENT',
679 'ADMIN_ACQ_FUND_TAG',
680 'ADMIN_ACQ_LINE_ITEM_ALERT_TEXT',
681 'ADMIN_CLAIM_POLICY',
682 'ADMIN_CURRENCY_TYPE',
684 'ADMIN_FUNDING_SOURCE',
686 'ADMIN_INVOICE_METHOD',
687 'ADMIN_INVOICE_PAYMENT_METHOD',
688 'ADMIN_LINEITEM_MARC_ATTR_DEF',
690 'ADMIN_USER_REQUEST_TYPE',
691 'CREATE_ACQ_FUNDING_SOURCE',
693 'CREATE_FUND_ALLOCATION',
694 'CREATE_FUNDING_SOURCE',
695 'CREATE_INVOICE_ITEM_TYPE',
696 'CREATE_INVOICE_METHOD',
698 'DELETE_ACQ_FUNDING_SOURCE',
700 'DELETE_FUND_ALLOCATION',
701 'DELETE_FUNDING_SOURCE',
702 'DELETE_INVOICE_ITEM_TYPE',
703 'DELETE_INVOICE_METHOD',
706 'SHARE_REPORT_FOLDER',
707 'UPDATE_ACQ_FUNDING_SOURCE',
708 'UPDATE_INVOICE_ITEM_TYPE',
709 'UPDATE_INVOICE_METHOD');
712 -- Add serials permissions to the Serials group
714 INSERT INTO permission.grp_perm_map (grp, perm, depth, grantable)
716 pgt.id, perm.id, aout.depth, FALSE
718 permission.grp_tree pgt,
719 permission.perm_list perm,
720 actor.org_unit_type aout
722 pgt.name = 'Serials' AND
723 aout.name = 'System' AND
725 'ADMIN_ASSET_COPY_TEMPLATE',
726 'ADMIN_SERIAL_CAPTION_PATTERN',
727 'ADMIN_SERIAL_DISTRIBUTION',
728 'ADMIN_SERIAL_STREAM',
729 'ADMIN_SERIAL_SUBSCRIPTION',
734 -- Add basic staff permissions to the Volunteers group
736 INSERT INTO permission.grp_perm_map (grp, perm, depth, grantable)
738 pgt.id, perm.id, aout.depth, FALSE
740 permission.grp_tree pgt,
741 permission.perm_list perm,
742 actor.org_unit_type aout
744 pgt.name = 'Volunteers' AND
745 aout.name = 'Branch' AND
749 'CREATE_IN_HOUSE_USE',
753 'VIEW_COPY_CHECKOUT',
758 'VIEW_USER_FINES_SUMMARY',
759 'VIEW_USER_TRANSACTIONS');
761 INSERT INTO permission.grp_perm_map (grp, perm, depth, grantable)
763 pgt.id, perm.id, aout.depth, FALSE
765 permission.grp_tree pgt,
766 permission.perm_list perm,
767 actor.org_unit_type aout
769 pgt.name = 'Volunteers' AND
770 aout.name = 'Consortium' AND
772 'CREATE_COPY_TRANSIT',
773 'CREATE_TRANSACTION',
777 'VIEW_ORG_SETTINGS');