Roles and permissions

What each role can do on each entity. Rows marked "only own" or "scope" are filtered by the core on every list, read, update and delete.

Roles

Role	Description
hostel:admin	University hostel office: all hostels, masters, fee templates, seat quotas, staff assignment, settings
hostel:warden	Runs the hostels assigned to them: applications, allotment, counter booking, attendance, leave, guests, complaints, mess menu
hostel:accounts	Read-only view of hostel fees, applications and reports; processes cancellation refunds
hostel:student	Browses hostels, applies, selects a bed when allowed, pays, and raises leave, guest and complaint requests for themselves

Access by entity

Entity	hostel:admin	hostel:warden	hostel:accounts	hostel:student
Room Allotment	read, create, update, delete, import, export	read, create, update — only rows in the user's scope (via room.hostel)	read	read — only own rows (via student)
Amenity	read, create, update, delete, import, export	read	read	read
Hostel Application	read, create, update, delete, import, export	read, create, update — only rows in the user's scope (via hostel)	read	read, create — only own rows (via student)
Attendance	read, create, update, delete, import, export	read, create, update — only rows in the user's scope (via hostel)		read — only own rows (via student)
Hostel Cancellation	read, create, update, delete, import, export	read, create, update — only rows in the user's scope (via hostel)	read, update	read, create — only own rows (via student)
Complaint	read, create, update, delete, import, export	read, create, update — only rows in the user's scope (via hostel)		read, create, update — only own rows (via student)
Complaint Comment	read, create, update, delete, import, export	read, create, update		read, create
Hostel Fee Head	read, create, update, delete, import, export	read	read	read
Hostel Fee Template	read, create, update, delete, import, export	read — only rows in the user's scope (via hostel)	read	read
Guest Stay	read, create, update, delete, import, export	read, create, update — only rows in the user's scope (via hostel)	read	read, create — only own rows (via student)
Hostel	read, create, update, delete, import, export	read, update	read	read
Hostel Amenity	read, create, update, delete, import, export	read	read	read
Hostel Semester Rule	read, create, update, delete, import, export	read	read	read
Hostel Staff Assignment	read, create, update, delete, import, export	read — only rows in the user's scope (via hostel)
Leave / Gate Pass	read, create, update, delete, import, export	read, create, update — only rows in the user's scope (via hostel)		read, create — only own rows (via student)
Mess Menu Item	read, create, update, delete, import, export	read, create, update, delete — only rows in the user's scope (via hostel)	read	read
Mess Plan	read, create, update, delete, import, export	read	read	read
Resident Profile	read, create, update, delete, import, export	read, create, update	read	read, create, update — only own rows (via student)
Room	read, create, update, delete, import, export	read, update — only rows in the user's scope (via hostel)	read	read
Room Type	read, create, update, delete, import, export	read — only rows in the user's scope (via hostel)	read	read
Room Type Amenity	read, create, update, delete, import, export	read	read	read
Seat Quota	read, create, update, delete, import, export	read	read
Seat Quota Plan	read, create, update, delete, import, export	read — only rows in the user's scope (via hostel)	read