Required Permissions for the Interviewer

For our third set of required permissions, let's take a look at Melissa Lee's role as an interviewer. Ben, her manager, likes Melissa to interview candidates for highly technical positions, but doesn't want her speaking with folks who are applying for roles on the user interface team. As a result, Melissa should be able to view only the candidates and job applications to which she's assigned as an interviewer. No such restriction needs to exist on the positions that are out there, but she shouldn't be able to view the minimum and maximum salary values for any of them. Likewise, she shouldn't see the social security number of any candidate, since it's sensitive information that has nothing to do with her job.

Melissa must be able to create and edit her reviews so that she can record her comments about each candidate, but she shouldn't be able to see the reviews of other interviewers—reading them might sway her opinion one way or the other. As with hiring managers and recruiters, Melissa also shouldn't be allowed to delete any records to ensure that public records laws are fulfilled.

Finally, the posting of jobs to employment websites has no bearing on Melissa's responsibilities, so both the employment website and job posting records should be completely off-limits to her.

Here's a summary of the required permissions we need to implement for an interviewer:

Table 1. Summary of Required Permissions: Interviewer

	Read	Create	Edit	Delete
Position	(No min/max pay)
Candidate	* (No SSN)
Job Application	*
Review	**		**
Job Posting
Employment Website

* Only for those records that are associated with a position to which the interviewer has been assigned

** Only for those records that the interviewer owns