Are you ready?
In this tutorial we are going to learn how to manage
Permissions for a particular user role. The system allows to control the access of all types of user roles within the system. It is possible to limit access within a particular user role to accomodate different business needs.
In this tutorial, we will customise
Merchant 1 permissions that are frequently granted to users collectively. Thus, when a user is created a particular role can be assigned instead of a large number of individual permissions.
In the gateway system, there are twelve security roles that belong to four groups (System, Portfolio, Reseller, Merchant, Customer). Security roles are organized hierarchically from
System 2 (the highest security level with the largest number of permissions) to
Customer 1 (the least number of permissions). To learn more about permissions based security mechanism, review
this guide." >Security Role to restrict the ability of users with this role to do certain operations. In particular, we will limit their ability to make any modifications to transactions.
To see the full list of permission configurations, click
here.
We will use the following parameters:
Access Policy Role: Merchant 1
Group: Transactions
/sale/~modify: deny
/credit/~modify : deny
/void/~modify: deny
/refund/~issue-refund: deny
/refund/~issue-refund-90: deny