Merge pull request #68 from EasyAbp/redesigned-management-permissions

Redesign management permissions as read-write separation
EasyAbp · Oct 31, 2023 · 6a62f64 · 6a62f64
2 parents f77aca2 + 5ca3e91
commit 6a62f64
Show file tree

Hide file tree

Showing 37 changed files with 181 additions and 38 deletions.
diff --git a/common.props b/common.props
@@ -1,7 +1,7 @@
 <Project>
   <PropertyGroup>
     <LangVersion>latest</LangVersion>
-    <Version>2.8.0</Version>
+    <Version>2.9.0</Version>
     <NoWarn>$(NoWarn);CS1591</NoWarn>
     <GeneratePackageOnBuild>true</GeneratePackageOnBuild>
     <Authors>EasyAbp Team</Authors>

diff --git a/...s/EasyAbp/PaymentService/Prepayment/Permissions/PrepaymentPermissionDefinitionProvider.cs b/...s/EasyAbp/PaymentService/Prepayment/Permissions/PrepaymentPermissionDefinitionProvider.cs
@@ -8,10 +8,12 @@ public class PrepaymentPermissionDefinitionProvider : PermissionDefinitionProvid
     {
         public override void Define(IPermissionDefinitionContext context)
         {
-            var myGroup = context.AddGroup(PrepaymentPermissions.GroupName, L("Permission:Prepayment"));
+            var myGroup = context.AddGroup(PrepaymentPermissions.GroupName, L("Permission:PaymentServicePrepayment"));
 
             var accountPermission = myGroup.AddPermission(PrepaymentPermissions.Account.Default, L("Permission:Account"));
-            accountPermission.AddChild(PrepaymentPermissions.Account.Manage, L("Permission:Manage"));
+            accountPermission.AddChild(PrepaymentPermissions.Account.Manage.ManageDefault, L("Permission:Manage"));
+            accountPermission.AddChild(PrepaymentPermissions.Account.Manage.ChangeBalance, L("Permission:ChangeBalance"));
+            accountPermission.AddChild(PrepaymentPermissions.Account.Manage.ChangeLockedBalance, L("Permission:ChangeLockedBalance"));
             accountPermission.AddChild(PrepaymentPermissions.Account.TopUp, L("Permission:TopUp"));
             accountPermission.AddChild(PrepaymentPermissions.Account.Withdraw, L("Permission:Withdraw"));
 

diff --git a/...lication.Contracts/EasyAbp/PaymentService/Prepayment/Permissions/PrepaymentPermissions.cs b/...lication.Contracts/EasyAbp/PaymentService/Prepayment/Permissions/PrepaymentPermissions.cs
@@ -14,9 +14,15 @@ public static string[] GetAll()
         public class Account
         {
             public const string Default = GroupName + ".Account";
-            public const string Manage = Default + ".Manage";
             public const string TopUp = Default + ".TopUp";
             public const string Withdraw = Default + ".Withdraw";
+
+            public class Manage
+            {
+                public const string ManageDefault = Default + ".Manage";
+                public const string ChangeBalance = ManageDefault + ".ChangeBalance";
+                public const string ChangeLockedBalance = ManageDefault + ".ChangeLockedBalance";
+            }
         }
 
         public class Transaction
@@ -38,4 +44,4 @@ public class WithdrawalRequest
             public const string Review = Default + ".Review";
         }
     }
-}
+}
diff --git a/...ce.Prepayment.Application/EasyAbp/PaymentService/Prepayment/Accounts/AccountAppService.cs b/...ce.Prepayment.Application/EasyAbp/PaymentService/Prepayment/Accounts/AccountAppService.cs
@@ -51,7 +51,7 @@ public override async Task<AccountDto> GetAsync(Guid id)
 
             if (dto.UserId != CurrentUser.GetId())
             {
-                await AuthorizationService.CheckAsync(PrepaymentPermissions.Account.Manage);
+                await AuthorizationService.CheckAsync(PrepaymentPermissions.Account.Manage.ManageDefault);
             }
 
             return dto;
@@ -68,7 +68,7 @@ public override async Task<PagedResultDto<AccountDto>> GetListAsync(GetAccountLi
         {
             if (input.UserId != CurrentUser.GetId())
             {
-                await AuthorizationService.CheckAsync(PrepaymentPermissions.Account.Manage);
+                await AuthorizationService.CheckAsync(PrepaymentPermissions.Account.Manage.ManageDefault);
             }
 
             var result = await base.GetListAsync(input);
@@ -97,7 +97,7 @@ await _repository.InsertAsync(new Account(GuidGenerator.Create(), CurrentTenant.
             return result;
         }
 
-        [Authorize(PrepaymentPermissions.Account.Manage)]
+        [Authorize(PrepaymentPermissions.Account.Manage.ChangeBalance)]
         public virtual async Task<AccountDto> ChangeBalanceAsync(Guid id, ChangeBalanceInput input)
         {
             var account = await _repository.GetAsync(id);
@@ -120,7 +120,7 @@ public virtual async Task<AccountDto> ChangeBalanceAsync(Guid id, ChangeBalanceI
             return await MapToGetOutputDtoAsync(account);
         }
 
-        [Authorize(PrepaymentPermissions.Account.Manage)]
+        [Authorize(PrepaymentPermissions.Account.Manage.ChangeLockedBalance)]
         public virtual async Task<AccountDto> ChangeLockedBalanceAsync(Guid id, ChangeLockedBalanceInput input)
         {
             var account = await _repository.GetAsync(id);

diff --git a/...ntService.Prepayment.Domain.Shared/EasyAbp/PaymentService/Prepayment/Localization/cs.json b/...ntService.Prepayment.Domain.Shared/EasyAbp/PaymentService/Prepayment/Localization/cs.json
@@ -3,10 +3,17 @@
   "texts": {
     "Menu:PaymentService": "Payment service",
     "Menu:PrepaymentManagement": "Prepayment",
+    "Permission:PaymentServicePrepayment": "Payment service - Prepayment",
     "Permission:Account": "Account",
     "Permission:Create": "Create",
     "Permission:Update": "Update",
     "Permission:Delete": "Delete",
+    "Permission:Manage": "Manage",
+    "Permission:ChangeBalance": "Change balance",
+    "Permission:ChangeLockedBalance": "Changed locked balance",
+    "Permission:TopUp": "TopUp",
+    "Permission:Withdraw": "Withdraw",
+    "Permission:Review": "Review",
     "Menu:Account": "Account",
     "Account": "Account",
     "AccountAccountGroupName": "Account group name",

diff --git a/...ntService.Prepayment.Domain.Shared/EasyAbp/PaymentService/Prepayment/Localization/en.json b/...ntService.Prepayment.Domain.Shared/EasyAbp/PaymentService/Prepayment/Localization/en.json
@@ -3,10 +3,17 @@
   "texts": {
     "Menu:PaymentService": "Payment service",
     "Menu:PrepaymentManagement": "Prepayment",
+    "Permission:PaymentServicePrepayment": "Payment service - Prepayment",
     "Permission:Account": "Account",
     "Permission:Create": "Create",
     "Permission:Update": "Update",
     "Permission:Delete": "Delete",
+    "Permission:Manage": "Manage",
+    "Permission:ChangeBalance": "Change balance",
+    "Permission:ChangeLockedBalance": "Changed locked balance",
+    "Permission:TopUp": "TopUp",
+    "Permission:Withdraw": "Withdraw",
+    "Permission:Review": "Review",
     "Menu:Account": "Account",
     "Account": "Account",
     "AccountAccountGroupName": "Account group name",

diff --git a/...ervice.Prepayment.Domain.Shared/EasyAbp/PaymentService/Prepayment/Localization/pl-PL.json b/...ervice.Prepayment.Domain.Shared/EasyAbp/PaymentService/Prepayment/Localization/pl-PL.json
@@ -3,10 +3,17 @@
   "texts": {
     "Menu:PaymentService": "Payment service",
     "Menu:PrepaymentManagement": "Prepayment",
+    "Permission:PaymentServicePrepayment": "Payment service - Prepayment",
     "Permission:Account": "Account",
     "Permission:Create": "Create",
     "Permission:Update": "Update",
     "Permission:Delete": "Delete",
+    "Permission:Manage": "Manage",
+    "Permission:ChangeBalance": "Change balance",
+    "Permission:ChangeLockedBalance": "Changed locked balance",
+    "Permission:TopUp": "TopUp",
+    "Permission:Withdraw": "Withdraw",
+    "Permission:Review": "Review",
     "Menu:Account": "Account",
     "Account": "Account",
     "AccountAccountGroupName": "Account group name",

diff --git a/...ervice.Prepayment.Domain.Shared/EasyAbp/PaymentService/Prepayment/Localization/pt-BR.json b/...ervice.Prepayment.Domain.Shared/EasyAbp/PaymentService/Prepayment/Localization/pt-BR.json
@@ -3,10 +3,17 @@
   "texts": {
     "Menu:PaymentService": "Payment service",
     "Menu:PrepaymentManagement": "Prepayment",
+    "Permission:PaymentServicePrepayment": "Payment service - Prepayment",
     "Permission:Account": "Account",
     "Permission:Create": "Create",
     "Permission:Update": "Update",
     "Permission:Delete": "Delete",
+    "Permission:Manage": "Manage",
+    "Permission:ChangeBalance": "Change balance",
+    "Permission:ChangeLockedBalance": "Changed locked balance",
+    "Permission:TopUp": "TopUp",
+    "Permission:Withdraw": "Withdraw",
+    "Permission:Review": "Review",
     "Menu:Account": "Account",
     "Account": "Account",
     "AccountAccountGroupName": "Account group name",

diff --git a/...ntService.Prepayment.Domain.Shared/EasyAbp/PaymentService/Prepayment/Localization/sl.json b/...ntService.Prepayment.Domain.Shared/EasyAbp/PaymentService/Prepayment/Localization/sl.json
@@ -3,10 +3,17 @@
   "texts": {
     "Menu:PaymentService": "Payment service",
     "Menu:PrepaymentManagement": "Prepayment",
+    "Permission:PaymentServicePrepayment": "Payment service - Prepayment",
     "Permission:Account": "Account",
     "Permission:Create": "Create",
     "Permission:Update": "Update",
     "Permission:Delete": "Delete",
+    "Permission:Manage": "Manage",
+    "Permission:ChangeBalance": "Change balance",
+    "Permission:ChangeLockedBalance": "Changed locked balance",
+    "Permission:TopUp": "TopUp",
+    "Permission:Withdraw": "Withdraw",
+    "Permission:Review": "Review",
     "Menu:Account": "Account",
     "Account": "Account",
     "AccountAccountGroupName": "Account group name",

diff --git a/...ntService.Prepayment.Domain.Shared/EasyAbp/PaymentService/Prepayment/Localization/tr.json b/...ntService.Prepayment.Domain.Shared/EasyAbp/PaymentService/Prepayment/Localization/tr.json
@@ -3,10 +3,17 @@
   "texts": {
     "Menu:PaymentService": "Payment service",
     "Menu:PrepaymentManagement": "Prepayment",
+    "Permission:PaymentServicePrepayment": "Payment service - Prepayment",
     "Permission:Account": "Account",
     "Permission:Create": "Create",
     "Permission:Update": "Update",
     "Permission:Delete": "Delete",
+    "Permission:Manage": "Manage",
+    "Permission:ChangeBalance": "Change balance",
+    "Permission:ChangeLockedBalance": "Changed locked balance",
+    "Permission:TopUp": "TopUp",
+    "Permission:Withdraw": "Withdraw",
+    "Permission:Review": "Review",
     "Menu:Account": "Account",
     "Account": "Account",
     "AccountAccountGroupName": "Account group name",

diff --git a/...ntService.Prepayment.Domain.Shared/EasyAbp/PaymentService/Prepayment/Localization/vi.json b/...ntService.Prepayment.Domain.Shared/EasyAbp/PaymentService/Prepayment/Localization/vi.json
@@ -3,10 +3,17 @@
   "texts": {
     "Menu:PaymentService": "Payment service",
     "Menu:PrepaymentManagement": "Prepayment",
+    "Permission:PaymentServicePrepayment": "Payment service - Prepayment",
     "Permission:Account": "Account",
     "Permission:Create": "Create",
     "Permission:Update": "Update",
     "Permission:Delete": "Delete",
+    "Permission:Manage": "Manage",
+    "Permission:ChangeBalance": "Change balance",
+    "Permission:ChangeLockedBalance": "Changed locked balance",
+    "Permission:TopUp": "TopUp",
+    "Permission:Withdraw": "Withdraw",
+    "Permission:Review": "Review",
     "Menu:Account": "Account",
     "Account": "Account",
     "AccountAccountGroupName": "Account group name",

diff --git a/...vice.Prepayment.Domain.Shared/EasyAbp/PaymentService/Prepayment/Localization/zh-Hans.json b/...vice.Prepayment.Domain.Shared/EasyAbp/PaymentService/Prepayment/Localization/zh-Hans.json
@@ -3,10 +3,17 @@
   "texts": {
     "Menu:PaymentService": "支付服务",
     "Menu:PrepaymentManagement": "储值卡",
+    "Permission:PaymentServicePrepayment": "支付服务 - 储值卡",
     "Permission:Account": "账户",
     "Permission:Create": "新建",
     "Permission:Update": "编辑",
     "Permission:Delete": "删除",
+    "Permission:Manage": "管理",
+    "Permission:ChangeBalance": "调整余额",
+    "Permission:ChangeLockedBalance": "调整锁定余额",
+    "Permission:TopUp": "充值",
+    "Permission:Withdraw": "提现",
+    "Permission:Review": "审核",
     "Menu:Account": "账户",
     "Account": "账户",
     "AccountAccountGroupName": "账户组",

diff --git a/...vice.Prepayment.Domain.Shared/EasyAbp/PaymentService/Prepayment/Localization/zh-Hant.json b/...vice.Prepayment.Domain.Shared/EasyAbp/PaymentService/Prepayment/Localization/zh-Hant.json
@@ -3,10 +3,17 @@
   "texts": {
     "Menu:PaymentService": "支付服務",
     "Menu:PrepaymentManagement": "儲值卡",
+    "Permission:PaymentServicePrepayment": "支付服務 - 儲值卡",
     "Permission:Account": "賬戶",
     "Permission:Create": "新建",
     "Permission:Update": "編輯",
     "Permission:Delete": "刪除",
+    "Permission:Manage": "管理",
+    "Permission:ChangeBalance": "調整餘額",
+    "Permission:ChangeLockedBalance": "調整鎖定餘額",
+    "Permission:TopUp": "充值",
+    "Permission:Withdraw": "提現",
+    "Permission:Review": "審核",
     "Menu:Account": "賬戶",
     "Account": "賬戶",
     "AccountAccountGroupName": "賬戶組",

diff --git a/...e.Prepayment/src/EasyAbp.PaymentService.Prepayment.Web/Menus/PrepaymentMenuContributor.cs b/...e.Prepayment/src/EasyAbp.PaymentService.Prepayment.Web/Menus/PrepaymentMenuContributor.cs
@@ -23,7 +23,7 @@ private async Task ConfigureMainMenu(MenuConfigurationContext context)
 
              var prepaymentManagementMenuItem = new ApplicationMenuItem(PrepaymentMenus.Prefix, l["Menu:PrepaymentManagement"]);
 
-            if (await context.IsGrantedAsync(PrepaymentPermissions.Account.Manage))
+            if (await context.IsGrantedAsync(PrepaymentPermissions.Account.Manage.ManageDefault))
             {
                 prepaymentManagementMenuItem.AddItem(
                     new ApplicationMenuItem(PrepaymentMenus.Account, l["Menu:Account"], "/PaymentService/Prepayment/Accounts/Account")

diff --git a/...s/EasyAbp/PaymentService/WeChatPay/Authorization/WeChatPayPermissionDefinitionProvider.cs b/...s/EasyAbp/PaymentService/WeChatPay/Authorization/WeChatPayPermissionDefinitionProvider.cs
@@ -8,7 +8,7 @@ public class WeChatPayPermissionDefinitionProvider : PermissionDefinitionProvide
     {
         public override void Define(IPermissionDefinitionContext context)
         {
-            var moduleGroup = context.AddGroup(WeChatPayPermissions.GroupName, L("Permission:WeChatPay"));
+            var moduleGroup = context.AddGroup(WeChatPayPermissions.GroupName, L("Permission:PaymentServiceWeChatPay"));
 
             var paymentRecord = moduleGroup.AddPermission(WeChatPayPermissions.PaymentRecords.Default,
                 L("Permission:PaymentRecord"));

diff --git a/...e.WeChatPay.Domain.Shared/EasyAbp/PaymentService/WeChatPay/Localization/WeChatPay/cs.json b/...e.WeChatPay.Domain.Shared/EasyAbp/PaymentService/WeChatPay/Localization/WeChatPay/cs.json
@@ -4,6 +4,9 @@
     "Menu:PaymentService": "Payment service",
     "Menu:WeChatPayManagement": "WeChat Pay",
     "Menu:RefundRecord": "Refund record",
+    "Permission:PaymentServiceWeChatPay": "Payment service - WeChat Pay",
+    "Permission:PaymentRecord": "PaymentRecord",
+    "Permission:RefundRecord": "RefundRecord",
     "RefundRecord": "Refund record",
     "RefundRecordPaymentId": "Payment ID",
     "RefundRecordReturnCode": "ReturnCode",

diff --git a/...e.WeChatPay.Domain.Shared/EasyAbp/PaymentService/WeChatPay/Localization/WeChatPay/en.json b/...e.WeChatPay.Domain.Shared/EasyAbp/PaymentService/WeChatPay/Localization/WeChatPay/en.json
@@ -4,6 +4,9 @@
     "Menu:PaymentService": "Payment service",
     "Menu:WeChatPayManagement": "WeChat Pay",
     "Menu:RefundRecord": "Refund record",
+    "Permission:PaymentServiceWeChatPay": "Payment service - WeChat Pay",
+    "Permission:PaymentRecord": "PaymentRecord",
+    "Permission:RefundRecord": "RefundRecord",
     "RefundRecord": "Refund record",
     "RefundRecordPaymentId": "Payment ID",
     "RefundRecordReturnCode": "ReturnCode",

diff --git a/...e.WeChatPay.Domain.Shared/EasyAbp/PaymentService/WeChatPay/Localization/WeChatPay/pl.json b/...e.WeChatPay.Domain.Shared/EasyAbp/PaymentService/WeChatPay/Localization/WeChatPay/pl.json
@@ -4,6 +4,9 @@
     "Menu:PaymentService": "Payment service",
     "Menu:WeChatPayManagement": "WeChat Pay",
     "Menu:RefundRecord": "Refund record",
+    "Permission:PaymentServiceWeChatPay": "Payment service - WeChat Pay",
+    "Permission:PaymentRecord": "PaymentRecord",
+    "Permission:RefundRecord": "RefundRecord",
     "RefundRecord": "Refund record",
     "RefundRecordPaymentId": "Payment ID",
     "RefundRecordReturnCode": "ReturnCode",

diff --git a/...eChatPay.Domain.Shared/EasyAbp/PaymentService/WeChatPay/Localization/WeChatPay/pt-BR.json b/...eChatPay.Domain.Shared/EasyAbp/PaymentService/WeChatPay/Localization/WeChatPay/pt-BR.json
@@ -4,6 +4,9 @@
     "Menu:PaymentService": "Payment service",
     "Menu:WeChatPayManagement": "WeChat Pay",
     "Menu:RefundRecord": "Refund record",
+    "Permission:PaymentServiceWeChatPay": "Payment service - WeChat Pay",
+    "Permission:PaymentRecord": "PaymentRecord",
+    "Permission:RefundRecord": "RefundRecord",
     "RefundRecord": "Refund record",
     "RefundRecordPaymentId": "Payment ID",
     "RefundRecordReturnCode": "ReturnCode",

diff --git a/...e.WeChatPay.Domain.Shared/EasyAbp/PaymentService/WeChatPay/Localization/WeChatPay/sl.json b/...e.WeChatPay.Domain.Shared/EasyAbp/PaymentService/WeChatPay/Localization/WeChatPay/sl.json
@@ -4,6 +4,9 @@
     "Menu:PaymentService": "Payment service",
     "Menu:WeChatPayManagement": "WeChat Pay",
     "Menu:RefundRecord": "Refund record",
+    "Permission:PaymentServiceWeChatPay": "Payment service - WeChat Pay",
+    "Permission:PaymentRecord": "PaymentRecord",
+    "Permission:RefundRecord": "RefundRecord",
     "RefundRecord": "Refund record",
     "RefundRecordPaymentId": "Payment ID",
     "RefundRecordReturnCode": "ReturnCode",

diff --git a/...e.WeChatPay.Domain.Shared/EasyAbp/PaymentService/WeChatPay/Localization/WeChatPay/tr.json b/...e.WeChatPay.Domain.Shared/EasyAbp/PaymentService/WeChatPay/Localization/WeChatPay/tr.json
@@ -4,6 +4,9 @@
     "Menu:PaymentService": "Payment service",
     "Menu:WeChatPayManagement": "WeChat Pay",
     "Menu:RefundRecord": "Refund record",
+    "Permission:PaymentServiceWeChatPay": "Payment service - WeChat Pay",
+    "Permission:PaymentRecord": "PaymentRecord",
+    "Permission:RefundRecord": "RefundRecord",
     "RefundRecord": "Refund record",
     "RefundRecordPaymentId": "Payment ID",
     "RefundRecordReturnCode": "ReturnCode",

diff --git a/...e.WeChatPay.Domain.Shared/EasyAbp/PaymentService/WeChatPay/Localization/WeChatPay/vi.json b/...e.WeChatPay.Domain.Shared/EasyAbp/PaymentService/WeChatPay/Localization/WeChatPay/vi.json
@@ -4,6 +4,9 @@
     "Menu:PaymentService": "Payment service",
     "Menu:WeChatPayManagement": "WeChat Pay",
     "Menu:RefundRecord": "Refund record",
+    "Permission:PaymentServiceWeChatPay": "Payment service - WeChat Pay",
+    "Permission:PaymentRecord": "PaymentRecord",
+    "Permission:RefundRecord": "RefundRecord",
     "RefundRecord": "Refund record",
     "RefundRecordPaymentId": "Payment ID",
     "RefundRecordReturnCode": "ReturnCode",

diff --git a/...hatPay.Domain.Shared/EasyAbp/PaymentService/WeChatPay/Localization/WeChatPay/zh-Hans.json b/...hatPay.Domain.Shared/EasyAbp/PaymentService/WeChatPay/Localization/WeChatPay/zh-Hans.json
@@ -4,6 +4,9 @@
     "Menu:PaymentService": "支付服务",
     "Menu:WeChatPayManagement": "微信支付",
     "Menu:RefundRecord": "退款记录",
+    "Permission:PaymentServiceWeChatPay": "支付服务 - 微信支付",
+    "Permission:PaymentRecord": "支付记录",
+    "Permission:RefundRecord": "退款记录",
     "RefundRecord": "退款记录",
     "RefundRecordPaymentId": "支付 ID",
     "RefundRecordReturnCode": "ReturnCode",

diff --git a/...hatPay.Domain.Shared/EasyAbp/PaymentService/WeChatPay/Localization/WeChatPay/zh-Hant.json b/...hatPay.Domain.Shared/EasyAbp/PaymentService/WeChatPay/Localization/WeChatPay/zh-Hant.json
@@ -4,6 +4,9 @@
     "Menu:PaymentService": "支付服務",
     "Menu:WeChatPayManagement": "微信支付",
     "Menu:RefundRecord": "退款記錄",
+    "Permission:PaymentServiceWeChatPay": "支付服務 - 微信支付",
+    "Permission:PaymentRecord": "付款記錄",
+    "Permission:RefundRecord": "退款紀錄",
     "RefundRecord": "退款記錄",
     "RefundRecordPaymentId": "支付 ID",
     "RefundRecordReturnCode": "ReturnCode",

diff --git a/...tracts/EasyAbp/PaymentService/Authorization/PaymentServicePermissionDefinitionProvider.cs b/...tracts/EasyAbp/PaymentService/Authorization/PaymentServicePermissionDefinitionProvider.cs
@@ -11,17 +11,12 @@ public override void Define(IPermissionDefinitionContext context)
             var moduleGroup = context.AddGroup(PaymentServicePermissions.GroupName, L("Permission:PaymentService"));
 
             var payment = moduleGroup.AddPermission(PaymentServicePermissions.Payments.Default, L("Permission:Payment"));
-            payment.AddChild(PaymentServicePermissions.Payments.Manage, L("Permission:Manage"));
-            payment.AddChild(PaymentServicePermissions.Payments.Create, L("Permission:Create"));
+            payment.AddChild(PaymentServicePermissions.Payments.Manage.ManageDefault, L("Permission:Manage"));
+            payment.AddChild(PaymentServicePermissions.Payments.Manage.Cancel, L("Permission:Cancel"));
+            payment.AddChild(PaymentServicePermissions.Payments.Manage.RollbackRefund, L("Permission:RollbackRefund"));
 
             var refund = moduleGroup.AddPermission(PaymentServicePermissions.Refunds.Default, L("Permission:Refund"));
             refund.AddChild(PaymentServicePermissions.Refunds.Manage, L("Permission:Manage"));
-            refund.AddChild(PaymentServicePermissions.Refunds.Create, L("Permission:Create"));
-
-            var withdrawalRecordPermission = moduleGroup.AddPermission(PaymentServicePermissions.WithdrawalRecord.Default, L("Permission:WithdrawalRecord"));
-            withdrawalRecordPermission.AddChild(PaymentServicePermissions.WithdrawalRecord.Create, L("Permission:Create"));
-            withdrawalRecordPermission.AddChild(PaymentServicePermissions.WithdrawalRecord.Update, L("Permission:Update"));
-            withdrawalRecordPermission.AddChild(PaymentServicePermissions.WithdrawalRecord.Delete, L("Permission:Delete"));
         }
 
         private static LocalizableString L(string name)