Required Permissions for the Recruiter

For our first set of required permissions, let's take a look at Mario Ruiz, a recruiter at Universal Containers. To do his job, Mario needs to be able to create, view, and modify any position, candidate, job application, or review that's in the system, and have full control over job postings on employment websites. Likewise, Mario needs to view and modify the recruiting records that all of the other recruiters own, since all of the recruiters at Universal Containers work together to fill every position, regardless of who created it.

Although Mario has the most powerful role in our Recruiting app, we still can't give him complete free reign. While it's OK for job posting and employment website data to be permanently deleted at any time, state and federal public records laws require that all other recruitment-related records be saved for a number of years so that if a hiring decision is questioned, it can be defended in court. Consequently, we need to make sure that Mario will never accidentally delete a record that needs to be saved to fulfill the law.

But how will he keep the number of positions, candidates, job applications, and reviews in check if he can't delete them? Won't the app become swamped with old data? Not if we're smart about it—instead of having Mario delete old records, we can use the Status field on a record as an indication of whether it's current. We'll filter out all of the old records by using a simple list view.

Here's a summary of the required permissions that we need to implement for a recruiter:

Table 1. Summary of Required Permissions: Recruiter

	Read	Create	Edit	Delete
Position
Candidate
Job Application
Review
Job Posting
Employment Website