A system which involves all or most personnel requires stringent control over which information can be accessed and the level of permissions assigned to each employee.
Since the organisation is defined as a hierarchical structure, it is possible to define which part of the hierarchy can be viewed by an employee, who can go down the hierarchy to the required level but can only go up to the level for which he or she is authorised.
Different roles mean we can establish what each user can do with the information: check, register or modify it, view personal details, or ensure these remain hidden.
Each role comprises a series of actions which can be personalised to include different types of actions for each employee.