Alhuda ERP Role-Permission Matrix
Superseded — kept for history only
This page was written in January 2026 and is not a description of how the system works today. It is kept so the reasoning behind early decisions stays readable. Current behaviour is described in PERMISSIONS.md and Access control (ACC). Do not build from this page.
Legend: V=View, C=Create, E=Edit, A=Approve, R=Reject, I=Issue, D=Download/Export, X=Delete
Inventory (Airlines, Quota Blocks, Slots)
| Role | Permissions |
|---|---|
| CEO | V D |
| General Manager | V C E X D |
| Operations Manager | V C E |
| Operations Executive | V |
| Sales Manager/Executive | V |
| B2B Manager/Executive | V |
| Ticket Manager | V |
| Finance Manager/Accountant/Cashier | V |
| Admin/HR Manager | V |
| IT Admin | V C E X |
| Read-only Auditor | V D |
Groups (Travel Groups, Slot Allocation, Capacity)
| Role | Permissions |
|---|---|
| CEO | V D |
| General Manager | V C E A X D |
| Operations Manager | V C E A |
| Operations Executive | V E |
| Sales Manager/Executive | V |
| B2B Manager/Executive | V |
| Ticket Manager | V |
| Finance Manager/Accountant/Cashier | V |
| Admin/HR Manager | V |
| IT Admin | V C E X |
| Read-only Auditor | V D |
CRM/Sales (Customers, Quotations, Bookings)
| Role | Permissions |
|---|---|
| CEO | V D |
| General Manager | V C E A R D |
| Sales Manager | V C E A |
| Sales Executive | V C E |
| B2B Manager | V C E A |
| B2B Executive | V C E |
| Operations Manager/Executive | V |
| Finance Manager/Accountant/Cashier | V |
| Admin/HR Manager | V |
| IT Admin | V C E |
| Read-only Auditor | V D |
Agents/B2B (Agent Profiles, Commissions)
| Role | Permissions |
|---|---|
| CEO | V D |
| General Manager | V C E A R D |
| B2B Manager | V C E A |
| B2B Executive | V C E |
| Sales Manager/Executive | V |
| Operations Manager/Executive | V |
| Finance Manager/Accountant/Cashier | V |
| Admin/HR Manager | V |
| IT Admin | V C E |
| Read-only Auditor | V D |
Operations Approvals (Verification, Movement Chart)
| Role | Permissions |
|---|---|
| CEO | V D |
| General Manager | V A R D |
| Operations Manager | V A R |
| Operations Executive | V A |
| Sales Manager/Executive | V |
| B2B Manager/Executive | V |
| Finance Manager/Accountant/Cashier | V |
| Ticket Manager | V |
| Admin/HR Manager | V |
| IT Admin | V |
| Read-only Auditor | V D |
Visa (Case, Status, Documents)
| Role | Permissions |
|---|---|
| CEO | V D |
| General Manager | V A R D |
| Visa Officer | V C E A |
| Operations Manager | V C E A |
| Operations Executive | V C E |
| Sales Manager/Executive | V |
| B2B Manager/Executive | V |
| Finance Manager/Accountant/Cashier | V |
| Ticket Manager | V |
| Admin/HR Manager | V |
| IT Admin | V C E |
| Read-only Auditor | V D |
Tickets (Name Update, Holds, Issuance)
| Role | Permissions |
|---|---|
| CEO | V D |
| General Manager | V A D |
| Ticket Manager | V E I |
| Operations Manager/Executive | V |
| Finance Manager | V A |
| Accountant/Cashier | V |
| Sales/B2B | V |
| Admin/HR Manager | V |
| IT Admin | V |
| Read-only Auditor | V D |
Finance (Payments, Dues, Clearance, Receipts)
| Role | Permissions |
|---|---|
| CEO | V D |
| General Manager | V A D |
| Finance Manager | V C E A R D |
| Accountant | V C E |
| Cashier | V C |
| Operations Manager/Executive | V |
| Sales/B2B | V |
| Ticket Manager | V |
| Admin/HR Manager | V |
| IT Admin | V |
| Read-only Auditor | V D |
Hotels/Food Inventory (Stock + Assignments)
| Role | Permissions |
|---|---|
| CEO | V D |
| General Manager | V C E A D |
| Operations Manager | V C E A |
| Operations Executive | V C E |
| Sales/B2B | V |
| Finance | V |
| Admin/HR Manager | V |
| IT Admin | V |
| Read-only Auditor | V D |
Communications Log
| Role | Permissions |
|---|---|
| CEO | V D |
| General Manager | V C E D |
| Operations Manager/Executive | V C E |
| Sales/B2B | V C E |
| Ticket Manager | V C E |
| Finance | V |
| Admin/HR Manager | V |
| IT Admin | V |
| Read-only Auditor | V D |
Reports
| Role | Permissions |
|---|---|
| CEO | V D |
| General Manager | V D |
| Dept Managers | V D |
| Executives | V |
| Finance | V D |
| Admin/HR Manager | V D |
| IT Admin | V D |
| Read-only Auditor | V D |
Admin & RBAC
| Role | Permissions |
|---|---|
| CEO | V |
| General Manager | V |
| Admin/HR Manager | V C E |
| IT Admin | V C E X |
| Read-only Auditor | V |
Audit Logs
| Role | Permissions |
|---|---|
| CEO | V D |
| General Manager | V D |
| Admin/HR Manager | V D |
| IT Admin | V D |
| Read-only Auditor | V D |
Critical Enforcement Rules
- Ops approval only after finance approval policy is satisfied (advance/partial/full).
- Ticket issuance requires finance clearance OR GM exception with written proof.
- Slot edits restricted to Ops Manager/GM/IT Admin.
- Group assignment restricted to Sales/B2B/Ops roles.
- Visa status updates restricted to Visa Officer/Ops/GM.
- Payments and receipts restricted to Finance roles.