Please implement role-based access control!

[4CFC]

Square really needs to implement true role-based access control (RBAC). The current permissions management implementation is horrendous. Here's a very simple example to demonstrate the point.

Suppose we have 2 functions - Cashier and Inventory. Currently, we have to define a set of permissions for Cashier and a separate set for Inventory. Then we can assign Cashier permissions to Alice and Inventory permissions to Bob.

Now suppose Carol needs to perform both functions. With true RBAC, we would simply assign those 2 roles to Carol and we'd be done. Instead, we have to define an entirely new set of permissions for Carol and try to make sure we include everything we included in the first two sets. (A clone function would be somewhat useful here, but that would only help with the first set to be included.)

With more roles (functions), the problem quickly becomes much worse. What ends up happening is that most people have an individually defined set of permissions - difficult and time-consuming to set up and to maintain.

If I'm missing something here, I welcome enlightenment. Otherwise, Square, please fix this mess!

[alexandriak]

Just coming in to say I would love to see some updates like you mentioned.