hr_lite 0.4.0 → 0.5.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 7d95fb8f07ae1876be368009a6d539b30938e7635d95abcbe9e1bbd404e57d0c
-  data.tar.gz: a3f31cbd6ca7936381ce13f3baf2c4ba6532431f5066867345a1c6e4c30a69b0
+  metadata.gz: 00cc5c346c88ddc803a5336a1c14a07dd4609fc887213f99e9b11654f26fa109
+  data.tar.gz: 8306411151a38ea5b1fe0fe9c7b4bd3572e16917a1defc1e15d4e823ab7f9c1b
 SHA512:
-  metadata.gz: 8efffc3c3f5468f3e15c7118ce0f50248e74a1e0b359a009022b9c40376c5b41c755c4cb350fbd68a6d90d734acfa23989f790c0143f2f815440983c52425488
-  data.tar.gz: b020fd0ca4df79fba65e8efdc7a99da0c6979ec050405b7b9b1fe63091d62cd421725815f46f03da450edf82635336eb7ac8814ce35807f2369252bb18631bd8
+  metadata.gz: 6f9be2057c4023881d956fc8feadb18d2917bb38cd92746b7a448a60fedea0fc94d335b22d36a627a8ce888e36a7520ca6118ad77e6f5956b96fdec695f813dc
+  data.tar.gz: 95c8048ecd82dc4b92d9e4e5b79240bed1385e297206383280c76e010d141f666e57eb150eac9defdbe556978226d7b4a5fff21ff8132103e04e09862a36f3ad

data/CHANGELOG.md

@@ -7,6 +7,22 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [0.5.0] - 2026-07-20
+
+### Added
+
+- **Superadmin (money) tier** — `config.superadmin_emails`: only these
+  people reach salary structures, payroll runs, slips administration,
+  appraisals and promotions, or see salary/appraisal data on the
+  employee page and the Payroll nav item. Ordinary leadership keeps
+  governing people and policy. Empty list (default) = leadership keeps
+  the money tier, exactly as before.
+- **System-assigned employee codes**: prefix (Settings, default "EMP")
+  + zero-padded sequence — EMP001, EMP002, … Forms no longer accept a
+  code; changing the prefix starts a fresh sequence; explicitly-set
+  codes (imports/seeds) are never overwritten.
+- "New employee" button on the Employees screen.
+
 ## [0.4.0] - 2026-07-19
 
 ### Added

data/app/controllers/hr_lite/admin/appraisals_controller.rb

@@ -1,6 +1,6 @@
 module HrLite
   module Admin
-    class AppraisalsController < LeadershipController
+    class AppraisalsController < SuperadminController
       before_action :set_profile
 
       def new

data/app/controllers/hr_lite/admin/designation_changes_controller.rb

@@ -1,7 +1,7 @@
 module HrLite
   module Admin
     # Standalone role change (promotion without an appraisal).
-    class DesignationChangesController < LeadershipController
+    class DesignationChangesController < SuperadminController
       before_action :set_profile
 
       def new

data/app/controllers/hr_lite/admin/employees_controller.rb

@@ -93,7 +93,7 @@ module HrLite
 
       def profile_params
         params.require(:employee_profile).permit(
-          :user_id, :manager_id, :employee_code, :designation, :date_of_birth, :date_of_joining,
+          :user_id, :manager_id, :designation, :date_of_birth, :date_of_joining,
           :date_of_exit, :department, :work_location, :pan_number, :pf_uan, :esi_number,
           :bank_account_number, :bank_ifsc, :bank_name, :tax_regime, :declared_annual_deductions
         )

data/app/controllers/hr_lite/admin/payroll_runs_controller.rb

@@ -1,6 +1,6 @@
 module HrLite
   module Admin
-    class PayrollRunsController < LeadershipController
+    class PayrollRunsController < SuperadminController
       def index
         @runs = paginate(PayrollRun.recent_first)
       end

data/app/controllers/hr_lite/admin/salary_slips_controller.rb

@@ -1,6 +1,6 @@
 module HrLite
   module Admin
-    class SalarySlipsController < LeadershipController
+    class SalarySlipsController < SuperadminController
       def show
         @slip = SalarySlip.includes(:payroll_run).find(params[:id])
         @profile = @slip.user_profile

data/app/controllers/hr_lite/admin/salary_structures_controller.rb

@@ -1,6 +1,6 @@
 module HrLite
   module Admin
-    class SalaryStructuresController < LeadershipController
+    class SalaryStructuresController < SuperadminController
       before_action :set_profile
 
       def new

data/app/controllers/hr_lite/admin/settings_controller.rb

@@ -7,7 +7,7 @@ module HrLite
 
       def update
         @setting = Setting.instance
-        if @setting.update(params.require(:setting).permit(:weekend_policy))
+        if @setting.update(params.require(:setting).permit(:weekend_policy, :employee_code_prefix))
           redirect_to edit_admin_setting_path, notice: "Settings saved."
         else
           render :edit, status: :unprocessable_entity

data/app/controllers/hr_lite/admin/superadmin_controller.rb

@@ -0,0 +1,16 @@
+module HrLite
+  module Admin
+    # Money tier: salary structures, payroll, slips, appraisals and
+    # promotions. Only config.superadmin_emails — ordinary leadership can
+    # govern policy and people but never sees another person's pay.
+    class SuperadminController < LeadershipController
+      before_action :require_hr_superadmin!
+
+      private
+
+      def require_hr_superadmin!
+        hr_access_denied unless hr_superadmin?
+      end
+    end
+  end
+end

data/app/controllers/hr_lite/application_controller.rb

@@ -10,7 +10,7 @@ module HrLite
     before_action :hr_set_current_actor
     around_action :hr_use_time_zone
 
-    helper_method :hr_current_user, :hr_admin?, :hr_leadership?, :hr_display_name
+    helper_method :hr_current_user, :hr_admin?, :hr_leadership?, :hr_superadmin?, :hr_display_name
 
     private
 
@@ -26,6 +26,10 @@ module HrLite
       HrLite.admin?(hr_current_user)
     end
 
+    def hr_superadmin?
+      HrLite.superadmin?(hr_current_user)
+    end
+
     def hr_leadership?
       HrLite.leadership?(hr_current_user)
     end

data/app/helpers/hr_lite/application_helper.rb

@@ -20,11 +20,15 @@ module HrLite
 
     LEADERSHIP_NAV_ITEMS = [
       { label: "Employees", path: :admin_employees_path,        match: [ "/admin/employees" ] },
-      { label: "Payroll",   path: :admin_payroll_runs_path,     match: [ "/admin/payroll_runs", "/admin/salary_slips" ] },
       { label: "Settings",  path: :admin_leave_types_path,      match: [ "/admin/leave_types", "/admin/office_locations", "/admin/holidays", "/admin/setting" ] },
       { label: "Audit",     path: :admin_audit_logs_path,       match: [ "/admin/audit_logs" ] }
     ].freeze
 
+    # Money tier — only config.superadmin_emails see these.
+    SUPERADMIN_NAV_ITEMS = [
+      { label: "Payroll", path: :admin_payroll_runs_path, match: [ "/admin/payroll_runs", "/admin/salary_slips" ] }
+    ].freeze
+
     # Only items whose routes exist yet (the nav grows with each phase).
     def hrl_nav_items(items)
       items.select { |item| hr_lite_route?(item[:path]) }

data/app/models/hr_lite/employee_profile.rb

@@ -21,6 +21,8 @@ module HrLite
     # config.onboard_user; never persisted, never audited).
     attr_accessor :new_user_name, :new_user_email, :new_user_password
 
+    before_validation :assign_employee_code, on: :create
+
     validates :employee_code, presence: true, uniqueness: true
     validates :user_id, uniqueness: true
     validates :date_of_joining, presence: true
@@ -89,6 +91,25 @@ module HrLite
 
     private
 
+    # Codes are system-assigned: Settings prefix + zero-padded next number
+    # (EMP001, EMP002, ...). Scans the highest existing suffix for the
+    # CURRENT prefix so changing the prefix restarts a fresh sequence
+    # without colliding with history.
+    def assign_employee_code
+      return if employee_code.present?
+
+      prefix = Setting.instance.employee_code_prefix
+      last = self.class.where("employee_code LIKE ?", "#{sanitize_sql_like(prefix)}%")
+                 .pluck(:employee_code)
+                 .filter_map { |code| code.delete_prefix(prefix)[/\A\d+\z/]&.to_i }
+                 .max || 0
+      self.employee_code = format("%s%03d", prefix, last + 1)
+    end
+
+    def sanitize_sql_like(value)
+      self.class.sanitize_sql_like(value)
+    end
+
     # A newly-assigned manager must be a real, still-employed staff member.
     def manager_is_active_staff
       return if manager_id.nil?

data/app/models/hr_lite/setting.rb

@@ -6,6 +6,8 @@ module HrLite
     WEEKEND_POLICIES = %w[sun_only sat_sun second_fourth_sat_sun].freeze
 
     validates :weekend_policy, inclusion: { in: WEEKEND_POLICIES }
+    validates :employee_code_prefix, presence: true,
+                                     format: { with: /\A[A-Za-z]{1,10}\z/, message: "letters only, max 10" }
 
     def self.instance
       first_or_create!

data/app/views/hr_lite/admin/employees/_form.html.erb

@@ -28,7 +28,16 @@
         </div>
       </fieldset>
     <% end %>
-    <div class="hrl-field"><%= f.label :employee_code %><%= f.text_field :employee_code %></div>
+    <% if profile.persisted? %>
+      <div class="hrl-field">
+        <%= f.label :employee_code %>
+        <input class="hrl-input" type="text" value="<%= profile.employee_code %>" disabled>
+        <p class="hrl-hint">System-assigned; the prefix lives under Settings.</p>
+      </div>
+    <% else %>
+      <p class="hrl-hint">The employee code is assigned automatically
+        (<%= HrLite::Setting.instance.employee_code_prefix %> + next number).</p>
+    <% end %>
     <div class="hrl-field"><%= f.label :designation %><%= f.text_field :designation %></div>
     <div class="hrl-field">
       <%= f.label :manager_id, "Reports to (their L1)" %>

data/app/views/hr_lite/admin/employees/index.html.erb

@@ -1,6 +1,9 @@
 <% content_for(:page_title) { "Employees" } %>
 <div class="hrl-page__head">
   <h1 class="hrl-page__title">Employees</h1>
+  <div class="hrl-page__actions">
+    <a class="hrl-btn hrl-btn--primary" href="<%= hr_lite.new_admin_employee_path %>">New employee</a>
+  </div>
 </div>
 
 <section class="hrl-card">

data/app/views/hr_lite/admin/employees/show.html.erb

@@ -3,9 +3,11 @@
   <h1 class="hrl-page__title"><%= hr_display_name(@profile.user) %> <span class="hrl-muted">(<%= @profile.employee_code %>)</span></h1>
   <div class="hrl-page__actions">
     <a class="hrl-btn" href="<%= hr_lite.edit_admin_employee_path(@profile) %>">Edit</a>
-    <a class="hrl-btn" href="<%= hr_lite.new_admin_employee_appraisal_path(@profile) %>">New appraisal</a>
-    <a class="hrl-btn" href="<%= hr_lite.new_admin_employee_designation_change_path(@profile) %>">Role change</a>
-    <a class="hrl-btn hrl-btn--primary" href="<%= hr_lite.new_admin_employee_salary_structure_path(@profile) %>">New structure</a>
+    <% if hr_superadmin? %>
+      <a class="hrl-btn" href="<%= hr_lite.new_admin_employee_appraisal_path(@profile) %>">New appraisal</a>
+      <a class="hrl-btn" href="<%= hr_lite.new_admin_employee_designation_change_path(@profile) %>">Role change</a>
+      <a class="hrl-btn hrl-btn--primary" href="<%= hr_lite.new_admin_employee_salary_structure_path(@profile) %>">New structure</a>
+    <% end %>
   </div>
 </div>
 
@@ -68,6 +70,7 @@
     </dl>
   </section>
 
+  <% if hr_superadmin? %>
   <section class="hrl-card">
     <h2 class="hrl-card__title">Salary structures</h2>
     <% if @structures.any? %>
@@ -90,8 +93,10 @@
       <p class="hrl-muted hrl-small">No structure yet — payroll will skip this employee.</p>
     <% end %>
   </section>
+  <% end %>
 </div>
 
+<% if hr_superadmin? %>
 <section class="hrl-card">
   <h2 class="hrl-card__title">Appraisals</h2>
   <% appraisals = HrLite::Appraisal.where(user_id: @profile.user_id).recent_first %>
@@ -116,3 +121,4 @@
     <p class="hrl-muted hrl-small">No appraisals yet.</p>
   <% end %>
 </section>
+<% end %>

data/app/views/hr_lite/admin/settings/edit.html.erb

@@ -11,6 +11,13 @@
       <%= f.select :weekend_policy, HrLite::Setting::WEEKEND_POLICIES.map { |p| [ p.humanize, p ] } %>
       <p class="hrl-hint">Drives working-day math everywhere: leave counting, attendance, payroll.</p>
     </div>
+    <div class="hrl-field">
+      <%= f.label :employee_code_prefix, "Employee code prefix" %>
+      <%= f.text_field :employee_code_prefix %>
+      <p class="hrl-hint">Codes are assigned automatically as
+        <%= @setting.employee_code_prefix %>001, <%= @setting.employee_code_prefix %>002, …
+        — you only choose the prefix.</p>
+    </div>
     <div class="hrl-form-actions">
       <%= f.submit "Save", class: "hrl-btn hrl-btn--primary" %>
     </div>

data/app/views/layouts/hr_lite/application.html.erb

@@ -42,6 +42,11 @@
           <% hrl_nav_items(HrLite::ApplicationHelper::LEADERSHIP_NAV_ITEMS).each do |item| %>
             <%= hrl_nav_link(item) %>
           <% end %>
+          <% if hr_superadmin? %>
+            <% hrl_nav_items(HrLite::ApplicationHelper::SUPERADMIN_NAV_ITEMS).each do |item| %>
+              <%= hrl_nav_link(item) %>
+            <% end %>
+          <% end %>
         <% end %>
       </nav>
 

data/db/migrate/20260720094454_add_employee_code_prefix_to_hr_lite_settings.rb

@@ -0,0 +1,7 @@
+class AddEmployeeCodePrefixToHrLiteSettings < ActiveRecord::Migration[8.0]
+  def change
+    # Employee codes are system-assigned: prefix + zero-padded sequence
+    # (EMP001, EMP002, ...). Leadership edits the prefix under Settings.
+    add_column :hr_lite_settings, :employee_code_prefix, :string, null: false, default: "EMP"
+  end
+end

data/lib/hr_lite/configuration.rb

@@ -8,6 +8,7 @@ module HrLite
                   :employees_scope, :mentionable_users, :notify, :render_pdf, :company,
                   :time_zone, :currency_symbol, :on_designation_change,
                   :leadership_emails, :leadership_check, :extra_stylesheets,
+                  :superadmin_emails, :superadmin_check,
                   :mailer_from, :public_url_base, :notification_matrix, :back_link,
                   :onboard_user, :offboard_user, :invite_url_for
 
@@ -49,6 +50,13 @@ module HrLite
         emails = HrLite.config.leadership_emails.map { |e| e.to_s.downcase.strip }
         emails.include?(user.email.to_s.downcase)
       end
+      # Money tier: salary structures, payroll, slips, appraisals. Empty
+      # list means "same as leadership" (pre-0.5.0 behaviour).
+      @superadmin_emails     = []
+      @superadmin_check      = ->(user) do
+        emails = HrLite.config.superadmin_emails.map { |e| e.to_s.downcase.strip }.reject(&:empty?)
+        emails.empty? ? HrLite.leadership?(user) : emails.include?(user.email.to_s.downcase)
+      end
       @extra_stylesheets     = [] # host stylesheets linked AFTER hr_lite.css (CSS-var overrides)
       @mailer_from           = "hr@example.com"
       @public_url_base       = nil # e.g. "https://hr.example.com" — enables email links + HrLite.public_url

data/lib/hr_lite/version.rb

@@ -1,3 +1,3 @@
 module HrLite
-  VERSION = "0.4.0"
+  VERSION = "0.5.0"
 end

data/lib/hr_lite.rb

@@ -38,6 +38,10 @@ module HrLite
       user.present? && !!config.leadership_check.call(user)
     end
 
+    def superadmin?(user)
+      user.present? && !!config.superadmin_check.call(user)
+    end
+
     # Leadership members resolvable to actual user records (for bell
     # notifications). Emails configured but absent from the user table are
     # still reachable by email — see Notifications.

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: hr_lite
 version: !ruby/object:Gem::Version
-  version: 0.4.0
+  version: 0.5.0
 platform: ruby
 authors:
 - kshitiz sinha
@@ -74,6 +74,7 @@ files:
 - app/controllers/hr_lite/admin/salary_slips_controller.rb
 - app/controllers/hr_lite/admin/salary_structures_controller.rb
 - app/controllers/hr_lite/admin/settings_controller.rb
+- app/controllers/hr_lite/admin/superadmin_controller.rb
 - app/controllers/hr_lite/application_controller.rb
 - app/controllers/hr_lite/appraisals_controller.rb
 - app/controllers/hr_lite/attendance_controller.rb
@@ -236,6 +237,7 @@ files:
 - db/migrate/20260719104316_create_hr_lite_comp_off_requests.rb
 - db/migrate/20260719104317_create_hr_lite_regularization_requests.rb
 - db/migrate/20260719162154_add_manager_to_hr_lite_employee_profiles.rb
+- db/migrate/20260720094454_add_employee_code_prefix_to_hr_lite_settings.rb
 - lib/generators/hr_lite/install/install_generator.rb
 - lib/generators/hr_lite/install/templates/AFTER_INSTALL
 - lib/generators/hr_lite/install/templates/initializer.rb