Skip to main content

Attendance Permissions Reference

Summary

Authorization is transitional: the monolith confirms granular self/team/all permissions, while extracted-service policies currently provide authenticated policy boundaries whose final claim mapping requires confirmation.

Audience

Identity/security owners, developers, QA, support, and architects.

Evidence matrix

CapabilityAuthenticationAuthorization evidenceTenant / scopeUI guardAPI enforcementMaturity
View AttendanceRequiredService Attendance.View; monolith self/team/all variantsTenant required; self/team/all in monolithRoute/module checksPolicy plus monolith scope checksTransitional
Manual captureRequiredService Attendance.Mark; monolith Attendance.MarkManualTenant and employeeUI action availabilityPolicy/permission checksTransitional
Approve/rejectRequiredService Attendance.Approve; monolith team/all variantsApprover scopeBoard action availabilityPolicy and scope checksTransitional
Self punchRequiredAttendance.PunchSelfOwn employee contextPunch route ruleController/service checksImplemented compatibility behavior
Create reopenRequiredService Attendance.Reopen.Create; monolith self variantOwn employee/datePunch UI actionPolicy/permission checksTransitional
Decide reopenRequiredService Attendance.Reopen.Approve; monolith team/all variantsApprover scopeBoard admin actionPolicy/permission checksTransitional
Time Office administrationRequiredService Attendance.AdminTenant requiredFeature/route rulesService policyTransitional

Final role-to-permission governance and extracted-service claim mapping require confirmation.

Reference Content

The source-backed catalog above is the normative reference content for this Draft page.

Source References

  • microservices/src/attendance-service/Api/Endpoints.cs
  • microservices/src/attendance-service/Program.cs
  • Controllers/AttendanceController.cs
  • Controllers/AttendanceReopenRequestsController.cs
  • UI/salary-ui/apps/client-hrms-portal/src/utils/ProtectedRoute.tsx

See Also

Keywords

  • Attendance
  • Attendance Permissions Reference
  • Reference

Revision Information

  • Status: Draft
  • Last reviewed: 2026-07-15
  • Review cycle: Quarterly