Roles and permissions

What each role can do on each entity. Rows marked "only own" or "scope" are filtered by the core on every list, read, update and delete.

Roles

Role	Description
fees:admin	Sets up fee heads and structures, assigns fees, approves concessions, refunds and transfers
fees:accountant	Records offline payments, updates demands and installments, processes refunds
fees:clerk	Raises other-fee and certificate charges and programme transfers
fees:student	Sees own fees, installments and receipts, pays online, requests a refund
fees:parent	Sees the fees, installments and receipts of linked students

Access by entity

Entity	fees:admin	fees:accountant	fees:clerk	fees:student	fees:parent
Concession / Scholarship	read, create, update, delete	read, create, update		read — only own rows (via student)	read — only own rows (via student)
Student Fee Demand	read, create, update, delete	read, update	read	read — only own rows (via student)	read — only own rows (via student)
Fee Demand Component	read, create, update, delete	read, update	read	read	read
Fee Head	read, create, update, delete	read	read	read	read
Fee Notice	read, create, update, delete	read		read	read
Fee Remark	read, create	read, create	read
Fee Structure	read, create, update, delete	read	read	read
Fee Structure Component	read, create, update, delete	read	read	read	read
Installment	read, create, update, delete	read, create, update	read	read — only own rows (via student)	read — only own rows (via student)
Other Fee Charge	read, create, update, delete	read, create, update	read, create, update	read — only own rows (via student)	read — only own rows (via student)
Other Fee Type	read, create, update, delete	read	read	read
Programme Transfer	read, create, update	read	read, create, update
Fee Receipt	read, create, update	read, create	read	read — only own rows (via student)	read — only own rows (via student)
Student Refund	read, create, update, delete	read, create, update		read, create, update — only own rows (via student)