ligbox-ops-platform/quickstart.md

Quickstart — Spec 027 Matriz de Funções

Status: Draft — Fase 2 pendente
Depende de: Spec 003, 004, 015, 024

---

Funções comercial (Roger)

ID	Label	FOSS	Odoo	OpenPanel
sales_admin	Sales Admin — Gerente	grupo ligbox-sales-admin	Sales Manager	OpenAdmin Admin
sales_support	Sales Support — Analista	grupo ligbox-sales-support	Salesman	autologin só

---

Validar matriz

1. specs/027-desk-rbac-function-matrix/spec.md — secções 2–4.1
2. contracts/vm123-product-roles.md — APIs FOSS, Odoo, OpenPanel

---

Criar grupos FOSS (VM123 — manual v1)

1. Login https://financeiro.ligbox.com.br/admin
2. Extensions → Staff → Groups — criar:
   • ligbox-sales-admin (client, order, invoice, support — sem staff settings)
   • ligbox-sales-support (client, order, support — read-only invoice)
   • ligbox-finance-admin (full finance modules)

---

Teste API FOSS (LAN)

curl -s -X POST "https://financeiro.ligbox.com.br/api/admin/client/get_list" \
  -H "Authorization: Basic $(echo -n 'admin:FOSS_API_KEY' | base64)" \
  -H "Content-Type: application/json" \
  -d '{"per_page":5}'

---

Teste Odoo XML-RPC

import xmlrpc.client
common = xmlrpc.client.ServerProxy("https://financeiro.ligbox.com.br/odoo/xmlrpc/2/common")
uid = common.authenticate("ligbox", "admin@ligbox.com.br", "API_KEY", {})
models = xmlrpc.client.ServerProxy("https://financeiro.ligbox.com.br/odoo/xmlrpc/2/object")
print(models.execute_kw("ligbox", uid, "API_KEY", "res.users", "search_read", [[("login","=","admin@ligbox.com.br")]], {"fields":["groups_id"]}))

---

Teste OpenPanel bridge

# Token
curl -s -X POST "http://10.10.10.123:18087/api" \
  -H "Content-Type: application/json" \
  -d '{"username":"ligboxadmin","password":"..."}'

# List (Community bridge — GET /api health)
curl -s -H "Authorization: Bearer BRIDGE_TOKEN" "http://10.10.10.123:18087/api"

---

Checklist Fase 2 Desk

• sales_admin / sales_support no dropdown approve (Spec 004)
• permissions.py + can_create_foss_order
• Módulos default por função (secção 7 spec)
• Drawer VM123 deep-links (/api/v1/vm123/links/client)
• Grupos FOSS criados manualmente na VM123
• Apps Odoo crm + sale + account instaladas na VM123 (install-odoo-apps.sh)

---

Resumo ambientes

Função	VM112	VM122	VM123
Sales Admin	🔒	billing ✅ leads ✅	FOSS+Odoo ✅
Sales Support	🔒	leads ✅	FOSS pedidos ✅ Odoo user
Financeiro	🔒	billing ✅	FOSS+Odoo ✅