Permissions live under module auto_str. Tenant Owner and platform Admin bypass all checks.
Permission keys
| Permission | UI capability |
|---|
auto_str.plan.generate | Generate Plan for Review |
auto_str.plan.review | Edit lines, quick-approve, reject |
auto_str.plan.submit | Submit for validation |
auto_str.plan.finalize | Finalize → create STRs |
auto_str.plan.reopen | Re-open review |
auto_str.plan.cancel | Cancel plan |
auto_str.create | Create All STRs (legacy) — bypasses review |
auto_str.delete_preview | Remove STRs/SKUs from run preview |
Typical role assignment
| Role | Typical grants |
|---|
| Head Pharmacist | All auto_str.plan.* keys |
| Warehouse Manager | plan.generate, plan.review, plan.submit |
| Tenant Owner | All (automatic) |
Route access
| Route | Permission gate |
|---|
/wms/auto-str | WMS module access + any auto_str permission for plan actions |
/wms/auto-str/plans/:planId | Same; review actions need plan.review |