From: Jaap Jansma <jaap.jansma@civicoop.org>
Date: Sat, 2 Dec 2023 15:10:21 +0000 (+0100)
Subject: dev/core#4466: added role and permissions for staff
X-Git-Url: https://vcs.fsf.org/?a=commitdiff_plain;h=45c81c4e8dfeaafef7bc71eee95ec304d491c81f;p=civicrm-core.git

dev/core#4466: added role and permissions for staff
---

diff --git a/setup/plugins/init/StandaloneUsers.civi-setup.php b/setup/plugins/init/StandaloneUsers.civi-setup.php
index b756ef77c8..bea9782cd0 100644
--- a/setup/plugins/init/StandaloneUsers.civi-setup.php
+++ b/setup/plugins/init/StandaloneUsers.civi-setup.php
@@ -58,6 +58,94 @@ if (!defined('CIVI_SETUP')) {
             'authenticate with password',
           ],
         ],
+        [
+          'name' => 'staff',
+          'label' => ts('Staff'),
+          'permissions' => [
+            'access AJAX API',
+            'access CiviCRM',
+            'access Contact Dashboard',
+            'access uploaded files',
+            'add contacts',
+            'view my contact',
+            'view all contacts',
+            'edit all contacts',
+            'edit my contact',
+            'delete contacts',
+            'import contacts',
+            'access deleted contacts',
+            'merge duplicate contacts',
+            'edit groups',
+            'manage tags',
+            'administer Tagsets',
+            'view all activities',
+            'delete activities',
+            'add contact notes',
+            'view all notes',
+            'access CiviContribute',
+            'delete in CiviContribute',
+            'edit contributions',
+            'make online contributions',
+            'view my invoices',
+            'access CiviEvent',
+            'delete in CiviEvent',
+            'edit all events',
+            'edit event participants',
+            'register for events',
+            'view event info',
+            'view event participants',
+            'gotv campaign contacts',
+            'interview campaign contacts',
+            'manage campaign',
+            'release campaign contacts',
+            'reserve campaign contacts',
+            'sign CiviCRM Petition',
+            'access CiviGrant',
+            'delete in CiviGrant',
+            'edit grants',
+            'access CiviMail',
+            'access CiviMail subscribe/unsubscribe pages',
+            'delete in CiviMail',
+            'view public CiviMail content',
+            'access CiviMember',
+            'delete in CiviMember',
+            'edit memberships',
+            'access all cases and activities',
+            'access my cases and activities',
+            'add cases',
+            'delete in CiviCase',
+            'access CiviPledge',
+            'delete in CiviPledge',
+            'edit pledges',
+            'access CiviReport',
+            'access Report Criteria',
+            'administer reserved reports',
+            'save Report Criteria',
+            'profile create',
+            'profile edit',
+            'profile listings',
+            'profile listings and forms',
+            'profile view',
+            'close all manual batches',
+            'close own manual batches',
+            'create manual batch',
+            'delete all manual batches',
+            'delete own manual batches',
+            'edit all manual batches',
+            'edit own manual batches',
+            'export all manual batches',
+            'export own manual batches',
+            'reopen all manual batches',
+            'reopen own manual batches',
+            'view all manual batches',
+            'view own manual batches',
+            'access all custom data',
+            'access contact reference fields',
+            // The admninister CiviCRM data implicitly sets other permissions as well.
+            // Such as, edit message templates and admnister dedupe rules.
+            'administer CiviCRM Data',
+          ],
+        ],
         [
           'name' => 'admin',
           'label' => ts('Administrator'),