Verifactu — permissions

Scaffolded stub — replace with proper documentation when this module is next touched.

Returned by VerifactuModule.get_permissions() (relative names; the registry namespaces them as verifactu.<name>).

Permission	Allows	Required by
verifactu.settings.read	Describe what this allows.	List the endpoints.
verifactu.settings.configure	Describe what this allows.	List the endpoints.
verifactu.records.read	Describe what this allows.	List the endpoints.
verifactu.queue.manage	Describe what this allows.	List the endpoints.
verifactu.environment.promote	Describe what this allows.	List the endpoints.

Role assignment

See backend/app/core/auth/permissions.py for the canonical role table.

Adding a new permission

1. Add the relative name to get_permissions() in backend/app/modules/verifactu/__init__.py (or module.py).
2. Add the namespaced form to the relevant role(s) in backend/app/core/auth/permissions.py.
3. Add a row to the table above.
4. Annotate the endpoint(s) with Depends(require_permission(...)).
5. Update frontend/app/config/permissions.ts if it gates UI.