Roles and permissions

What each role can do on each entity. Rows marked "only own" or "scope" are filtered by the core on every list, read, update and delete.

Roles

Role	Description
recruitment:admin	Recruitment cell: publishes advertisements, sets application fees, generates and publishes merit lists, exports applications
recruitment:committee	Screening / selection committee member: verifies applications and scores, shortlists, records interview marks
recruitment:applicant	Candidate: applies to published posts, uploads documents, pays the fee, tracks own application status

Access by entity

Entity	recruitment:admin	recruitment:committee	recruitment:applicant
API Score Sheet	read, update	read
Application	read, create, update	read, update	read, create, update — only own rows (via candidate)
Application Document	read, create, update, delete	read
Qualification	read, create, update, delete	read
Experience	read, create, update, delete	read
Application Fee Payment	read, update	read	read, create — only own rows (via candidate)
Application Fee Rule	read, create, update, delete	read, create, update, delete	read
Interview Score	read, create, update, delete	read, create, update
Job Posting	read, create, update, delete	read	read
Merit List Entry	read, create, update, delete	read
Referee	read, create, update, delete	read
Publication / Research Item	read, create, update, delete	read
Screening Review	read, create, update, delete	read, create, update
Training / Conference / Membership	read, create, update, delete	read