RBAC & Akses
Role-Based Access Control — sistem hak akses berdasarkan peran. Setiap role memiliki permission yang terdefinisi. Data dibatasi per cabang. Super Admin dapat mengatur semua role dan permission.
Daftar Role & Akses
| Role | Badge | Scope | Modul Utama |
|---|---|---|---|
| Super Admin | Super Admin | Semua cabang | Semua modul + Config + RBAC + Finance konsolidasi |
| Admin Cabang | Admin | 1 cabang | WO, Quotation, Kasir, Inventory, HCM, Finance cabang, Approval L1 |
| Kasir | Kasir | 1 cabang | Kasir, Pembayaran, Cetak Invoice, Kas Harian |
| Kepala Mekanik | Kep. Mekanik | 1 cabang | WO (QC), Operator Dashboard, Parts Request (approval) |
| Mekanik | Mekanik | WO yang di-assign | My Jobs, Parts Request, Job Update, WO Read-only |
| Gudang | Gudang | 1 cabang | Inventory, Parts Request (fulfill), Purchase Order |
Permission Matrix
| Modul / Aksi | Super Admin | Admin | Kasir | Kep. Mekanik | Mekanik | Gudang |
|---|---|---|---|---|---|---|
| Work Order — Buat | ✅ | ✅ | — | — | — | — |
| Work Order — Lihat | ✅ | ✅ | ✅ | ✅ | Assigned only | — |
| Work Order — QC | ✅ | — | — | ✅ | — | — |
| Kasir — Proses Bayar | ✅ | ✅ | ✅ | — | — | — |
| Inventory — Edit Stok | ✅ | ✅ | — | — | — | ✅ |
| Purchase Order — Buat | ✅ | ✅ | — | — | — | ✅ |
| Parts Request — Buat | ✅ | ✅ | — | ✅ | ✅ | — |
| Finance — Edit | ✅ | ✅ | Kas only | — | — | — |
| HCM — Edit | ✅ | ✅ | — | — | — | — |
| RBAC — Edit | ✅ | — | — | — | — | — |
| Laporan — Semua Cabang | ✅ | — | — | — | — | — |
Flow Diagram — Manajemen User & Role
User Lifecycle & Role Assignment
Dari pembuatan user baru hingga perubahan role dan deaktivasi
flowchart TD
A([Super Admin:\nBuat User Baru]) --> B[Input: Nama, Email,\nPassword, Cabang]
B --> C[Pilih Role]
C --> D{Role Dipilih}
D -->|Admin Cabang| E[Assign ke 1 Cabang]
D -->|Kasir / Mekanik / dll| F[Assign ke 1 Cabang\ndan Role Spesifik]
D -->|Super Admin| G[Akses Semua Cabang]
E --> H[User Aktif\nDapat Login]
F --> H
G --> H
H --> I[User Bekerja\nSesuai Permission Role]
I --> J{Perlu Ubah Role\natau Cabang?}
J -->|Ya| K[Super Admin: Edit\nRole / Cabang]
K --> L[Log Perubahan\ndi Audit Trail]
L --> H
J -->|Tidak| I
I --> M{User Keluar\natau Non-Aktif?}
M -->|Ya| N[Deaktivasi User\nRevoke Semua Sesi]
N --> O[Data Historis\nTetap Tersimpan]
M -->|Tidak| I
style A fill:#fee2e2,stroke:#ef4444
style H fill:#dcfce7,stroke:#16a34a
style N fill:#f1f5f9,stroke:#94a3b8