Payroll Permission Reference
Summary
This page records confirmed payroll permission reference behavior and marks incomplete boundaries explicitly.
Audience
Payroll users, developers, QA and support engineers, architects, and implementation reviewers.
Reference Content
UI route features
| Route area | Confirmed UI feature alternatives |
|---|---|
| Calculation | salary-calculate, salary |
| Advances | salary-advance, salary |
| Payslips | Payroll.ViewSelf, salary-slips, salary |
| Components | settings-salary-components, settings |
| Statutory settings | settings-salary-components, settings, statutory-payroll |
| Payroll reports | reports-payroll, reports |
| Compliance reports | reports-compliance, reports |
Navigation additionally uses audience and role buckets. The Payroll dashboard checks Payroll/HR administration roles and restricts monetary presentation using Payroll-related roles/features. Unfreeze has a page-level check including Payroll.Unfreeze and Payroll.Manage alternatives.
Enforcement boundary
| Boundary | Confirmed behavior | Documentation conclusion |
|---|---|---|
| UI visibility | AppLayout uses role, audience, module, and feature conditions | Determines whether navigation is rendered; not authorization evidence |
| Direct-route UI guard | ProtectedRoute checks session, tenant association, module, and at least one configured feature | Client access check only |
| Screen-level UI | Dashboard monetary visibility, broad payslip view, and unfreeze add checks | Applies only to those rendered actions/values |
| API authorization | Authentication/context wiring exists, but complete operation-level enforcement is not established by reviewed sources | Requires confirmation |
| Gateway authorization | Route ownership changes across direct, shadow, and compatibility operation | Transitional; policy equivalence Requires confirmation |
| Compatibility behavior | Legacy feature/role concepts coexist with namespaced strings | Do not assume names are equivalent or hierarchical |
No permission name should be inferred for payment, accounting posting, workflow approval, irreversible finalization, or bank-file submission because those capabilities are Not implemented in the reviewed Payroll workflow.
Source References
UI/salary-ui/apps/client-hrms-portal/src/App.tsxUI/salary-ui/apps/client-hrms-portal/src/components/AppLayout.tsxUI/salary-ui/apps/client-hrms-portal/src/utils/ProtectedRoute.tsxUI/salary-ui/apps/client-hrms-portal/src/pages/salary/CalculateSalaryPage.tsx
Related Articles
See Also
Keywords
- Payroll reference
- Payroll Permission Reference
Revision Information
- Status: Draft
- Last reviewed: 2026-07-15
- Review cycle: Quarterly