Administration and Controls
How administrators keep Procurement secure, configured, and reliable.
Access and Permissions
Start with least-privilege access. Give users only the permissions required for their actual responsibilities, then test using a non-admin account.
- purchase
- purchase_create
- purchase_update
- purchase_delete
- return
- return_create
- return_update
- return_delete
- vendor
- vendor_create
- vendor_update
- vendor_delete
- vendor_contact
- vendor_contact_create
- vendor_contact_update
- vendor_contact_delete
- gr
- gr_create
- gr_update
- gr_delete
- bill
- bill_create
- bill_update
- bill_delete
- bill_post
Settings, Menus, and Configuration
Configuration files found
- api_query_filters.php
- api_routes.php
- default_menu.php
- euapi_response_schemas.php
- euapi_routes.php
- menu.php
- module_config.php
- permissions.php
- routes.php
Menu entries found
- Procurement
- Purchase Orders
- Purchase Returns
- Vendors
- Vendor Groups
- Purchases Journal
- Bir Form 2307
- Atc Codes
- Goods Receipts
- Vendor Bills
- Procurement Settings
Automation and Integrations
Scheduled jobs
No module-local scheduled jobs were found.
Dashboard widgets
No dashboard widget registration was detected.
Public pages
No public page config or public-style route was detected.
API surfaces
API config files found: api_query_filters.php, api_routes.php, euapi_response_schemas.php, euapi_routes.php.
Seeders
Seeder files found: ProcurementDemoSeeder.php. Use them only for the data purpose documented by the module.
Tests
No module-specific test files were found.
Administrative Controls Checklist
- The module toggle is enabled only for tenants or environments where the workflow is approved.
- Role permissions are assigned by responsibility, not by convenience.
- Menu entries, default menu entries, and routes point users to the intended module-owned screens.
- Users know who is allowed to change settings, templates, status rules, and delete actions.
- Migrations are applied and table changes are verified in the target tenant context.
- API routes, filters, examples, scopes, and docs are reviewed after any data model change.
Change Management
- Announce workflow or permission changes before they affect live users.
- Update module README, CHANGELOG, and this guide when a workflow changes.
- For menu, route, permission, widget, API, or migration changes, validate the module from a non-admin account.
- Keep public pages, API examples, dashboard widgets, and scheduled jobs aligned with the real data model.