in src/main/java/org/apache/fineract/cn/dev/ServiceRunner.java [614:663]
private Role defineOrgAdministratorRole() {
final Permission employeeAllPermission = new Permission();
employeeAllPermission.setAllowedOperations(AllowedOperation.ALL);
employeeAllPermission.setPermittableEndpointGroupIdentifier(org.apache.fineract.cn.office.api.v1.PermittableGroupIds.EMPLOYEE_MANAGEMENT);
final Permission officeAllPermission = new Permission();
officeAllPermission.setAllowedOperations(AllowedOperation.ALL);
officeAllPermission.setPermittableEndpointGroupIdentifier(org.apache.fineract.cn.office.api.v1.PermittableGroupIds.OFFICE_MANAGEMENT);
final Permission userAllPermission = new Permission();
userAllPermission.setAllowedOperations(AllowedOperation.ALL);
userAllPermission.setPermittableEndpointGroupIdentifier(org.apache.fineract.cn.identity.api.v1.PermittableGroupIds.IDENTITY_MANAGEMENT);
final Permission roleAllPermission = new Permission();
roleAllPermission.setAllowedOperations(AllowedOperation.ALL);
roleAllPermission.setPermittableEndpointGroupIdentifier(org.apache.fineract.cn.identity.api.v1.PermittableGroupIds.ROLE_MANAGEMENT);
final Permission selfManagementPermission = new Permission();
selfManagementPermission.setAllowedOperations(AllowedOperation.ALL);
selfManagementPermission.setPermittableEndpointGroupIdentifier(org.apache.fineract.cn.identity.api.v1.PermittableGroupIds.SELF_MANAGEMENT);
final Permission ledgerManagementPermission = new Permission();
ledgerManagementPermission.setAllowedOperations(AllowedOperation.ALL);
ledgerManagementPermission.setPermittableEndpointGroupIdentifier(org.apache.fineract.cn.accounting.api.v1.PermittableGroupIds.THOTH_LEDGER);
final Permission accountManagementPermission = new Permission();
accountManagementPermission.setAllowedOperations(AllowedOperation.ALL);
accountManagementPermission.setPermittableEndpointGroupIdentifier(org.apache.fineract.cn.accounting.api.v1.PermittableGroupIds.THOTH_ACCOUNT);
final Permission customerPermission = new Permission();
customerPermission.setAllowedOperations(Collections.singleton(AllowedOperation.READ));
customerPermission.setPermittableEndpointGroupIdentifier(org.apache.fineract.cn.customer.PermittableGroupIds.CUSTOMER);
final Role role = new Role();
role.setIdentifier("orgadmin");
role.setPermissions(
Arrays.asList(
employeeAllPermission,
officeAllPermission,
userAllPermission,
roleAllPermission,
selfManagementPermission,
ledgerManagementPermission,
accountManagementPermission,
customerPermission
)
);
return role;
}