Skip to main content

Payroll Permission Reference

Summary

This page records confirmed payroll permission reference behavior and marks incomplete boundaries explicitly.

Audience

Payroll users, developers, QA and support engineers, architects, and implementation reviewers.

Reference Content

UI route features

Route areaConfirmed UI feature alternatives
Calculationsalary-calculate, salary
Advancessalary-advance, salary
PayslipsPayroll.ViewSelf, salary-slips, salary
Componentssettings-salary-components, settings
Statutory settingssettings-salary-components, settings, statutory-payroll
Payroll reportsreports-payroll, reports
Compliance reportsreports-compliance, reports

Navigation additionally uses audience and role buckets. The Payroll dashboard checks Payroll/HR administration roles and restricts monetary presentation using Payroll-related roles/features. Unfreeze has a page-level check including Payroll.Unfreeze and Payroll.Manage alternatives.

Enforcement boundary

BoundaryConfirmed behaviorDocumentation conclusion
UI visibilityAppLayout uses role, audience, module, and feature conditionsDetermines whether navigation is rendered; not authorization evidence
Direct-route UI guardProtectedRoute checks session, tenant association, module, and at least one configured featureClient access check only
Screen-level UIDashboard monetary visibility, broad payslip view, and unfreeze add checksApplies only to those rendered actions/values
API authorizationAuthentication/context wiring exists, but complete operation-level enforcement is not established by reviewed sourcesRequires confirmation
Gateway authorizationRoute ownership changes across direct, shadow, and compatibility operationTransitional; policy equivalence Requires confirmation
Compatibility behaviorLegacy feature/role concepts coexist with namespaced stringsDo not assume names are equivalent or hierarchical

No permission name should be inferred for payment, accounting posting, workflow approval, irreversible finalization, or bank-file submission because those capabilities are Not implemented in the reviewed Payroll workflow.

Source References

  • UI/salary-ui/apps/client-hrms-portal/src/App.tsx
  • UI/salary-ui/apps/client-hrms-portal/src/components/AppLayout.tsx
  • UI/salary-ui/apps/client-hrms-portal/src/utils/ProtectedRoute.tsx
  • UI/salary-ui/apps/client-hrms-portal/src/pages/salary/CalculateSalaryPage.tsx

See Also

Keywords

  • Payroll reference
  • Payroll Permission Reference

Revision Information

  • Status: Draft
  • Last reviewed: 2026-07-15
  • Review cycle: Quarterly