User Roles - Seguridad

Overview

The Seguridad system implements a comprehensive role-based access control (RBAC) system that assigns users to specific roles based on their organizational unit, function, and security clearance. Each role determines which modules, features, and data the user can access.

Permission Structure

Roles are defined by the permisos field in the usuario table. This field contains either numeric codes or text identifiers that map to specific modules and access levels.

The permission code is set during user creation and can be modified by administrators through the user management interface (alta_usuarios.php).

Role Categories

Administrator Roles

System Administrator

Permission Code: 0
Landing Page: index1.php
Description: Full system access with administrative privilegesCapabilities:

Access to all modules and features
User management and role assignment
System-wide data access
Configuration management

Administrative Staff

Permission Code: 100
Landing Page: admin/cabecera1.php
Description: Administrative operations and oversightCapabilities:

Administrative module access
User oversight functions
Cross-regional data visibility

Regional Unit Roles

Regional Units (Unidades Regionales) are the primary operational divisions. Each UR has dedicated access to their regional data:

UR 1-5
UR 6-10
UR 11-15

Unit	Code	Landing Page
UR 1	`1`	`ur1/cabecera1.php`
UR 2	`2`	`ur2/cabecera1.php`
UR 3	`3`	`ur3/cabecera1.php`
UR 4	`4`	`ur4/cabecera1.php`
UR 5	`5`	`ur5/cabecera1.php`

Unit	Code	Landing Page
UR 6	`6`	`ur6/cabecera1.php`
UR 7	`7`	`ur7/cabecera1.php`
UR 8	`8`	`ur8/cabecera1.php`
UR 9	`9`	`ur9/cabecera1.php`
UR 10	`10`	`ur10/cabecera1.php`

Unit	Code	Landing Page
UR 11	`11`	`ur11/cabecera1.php`
UR 12	`12`	`ur12/cabecera1.php`
UR 13	`13`	`ur13/cabecera1.php`
UR 14	`14`	`ur14/cabecera1.php`
UR 15	`15`	`ur15/cabecera1.php`

Each Regional Unit has identical functionality but operates on data specific to their geographic jurisdiction.

Judicial Personnel Roles

Judicial roles provide read-only consultation access to case data for court officials:

General Consultation Access

Permission Codes: 20, 200
Landing Pages: consulta/index1.php, consulta2/index1.phpProvides general consultation capabilities for judicial review and case oversight.

First Circumscription Courts

Courts serving the first judicial circumscription:

Court	Code	Landing Page
Juzgado 1	`21`	`primera_circuncripcion/juzgado1/menu_consulta.php`
Juzgado 2	`22`	`primera_circuncripcion/juzgado2/menu_consulta.php`
Juzgado 3	`23`	`primera_circuncripcion/juzgado3/menu_consulta.php`
Juzgado 4	`24`	`primera_circuncripcion/juzgado4/menu_consulta.php`
Juzgado 5	`25`	`primera_circuncripcion/juzgado5/menu_consulta.php`
Juzgado 6	`26`	`primera_circuncripcion/juzgado6/menu_consulta.php`
Juzgado 7	`27`	`primera_circuncripcion/juzgado7/menu_consulta.php`

Third Circumscription Court

Permission Code: 28
Landing Page: tercera_circuncripcion/juzgado3/menu_consulta.phpConsultation access for the third judicial circumscription.

Specialized Department Roles

Specialized units handle specific types of cases and investigations:

Traffic Department

Code: 99
Page: transito/index1.phpTraffic accident investigations and vehicle-related incidents.

Suicide Investigation

Code: 98
Page: suicidio/index1.phpSpecialized unit for suicide case investigation and documentation.

Traffic Homicide

Code: 97
Page: homicidio_accidente_transito/index1.phpInvestigations of fatalities resulting from traffic incidents.

Dependent Resources

Code: 96
Page: recursos_dependientes/index1.phpManagement of dependent personnel and resources.

Home Escape Cases

Code: 95
Page: fuga_hogar/index1.phpMissing persons and runaway cases.

UNICEF Unit

Code: 94
Page: unicef/index1.phpChild protection cases coordinated with UNICEF.

Toxicology

Code: 93
Page: toxico/cabecera1.phpDrug-related crimes and toxicology investigations.

Subsecretaría

Code: 92
Page: subsecretaria/index1.phpUndersecretary office operations and oversight.

Data Entry Unit

Code: 91
Page: carga_datos/index1.phpDedicated data entry and records management.

Operations

Code: 90
Page: operaciones/index1.phpOperational planning and tactical operations.

Federal Crimes Unit

Federal Crimes Department

Permission Code: 4444
Landing Page: delitos-federales/index1.php
Description: Federal-level crime investigation and prosecution supportJurisdiction:

Federal crimes
Cross-jurisdictional cases
Federal law enforcement coordination

Special Access Roles

These roles provide limited access to specific functions:

Query Functions
Operational Functions

Role	Code	Landing Page	Function
Vehicle Search	`800`	`buscar_dominio.php`	Search vehicle by license plate
Preventive Records	`801`	`buscarpreventivosoloconsultas.php`	Query preventive records
Map Consultation	`807`	`consultaMapa.php`	Geographic data visualization

Role	Code	Landing Page	Function
Domestic Violence	`802`	`operaciones/violencia_familiar.php`	Domestic violence cases
Operations Module	`803`	`operativos/index.php`	Operational activities
Internal Affairs	`804`	`asuntos_i/cabecera1.php`	Internal investigations
Road Safety	`805`	`seguridad_vial/cabecera1.php`	Road safety programs
Vehicle Verification	`806`	`verificacion_automotor/cabecera1.php`	Vehicle inspection records

Text-Based Roles

Some roles use text identifiers instead of numeric codes:

Deputy Chief (Sub-jefe)

Permission Code: Sub-jefe
Landing Page: consulta_mapa_simple.php
Description: Deputy chief access with map-based oversight capabilities

Security Director (dirseguridad)

Permission Code: dirseguridad
Landing Page: dirgral/index1.php
Description: Director-level access to security operations and strategic planning

Police Station (comisaria)

Permission Code: comisaria
Landing Page: comisarias/cabecera1.php
Description: Local police station operations and community policing

Operations (operaciones)

Permission Code: operaciones
Landing Page: operativos
Description: Operational management and field operations coordination

Role Assignment Process

Administrators assign roles through the user management interface:

Access User Management

Navigate to CARGA DE DATOS > Usuarios or directly to alta_usuarios.php

Create or Select User

Click Nuevo for new users
Click Modificar next to existing users to edit

Enter User Information

Required fields:

Username (lowercase, max 16 characters)
Password and confirmation
Description/Initials
Circunscripción (jurisdiction)
Categoria (permission code)

Set Permission Code

Enter the appropriate numeric or text permission code in the Categoria field

Optional: Set Data Entry Authorization

Configure “Autorizar carga fuera Periodo” to restrict data entry before a specific date

Save User

Click Guardar for new users or Modificar to update existing users

Only users with administrative privileges (code 0 or 100) can access the user management interface.

Permission Features

Data Entry Period Restriction

Administrators can restrict when users can enter data:

// Field: autorizado_carga_fuera_periodo
// Format: dd-mm-yyyy (e.g., 01-01-2016)
// Effect: Users cannot enter data dated before this date

This feature helps maintain data quality by preventing backdated entries without authorization.

Bulk Permission Management

Administrators can disable data entry for all users simultaneously:

Batch Period Restriction

The “Inhabilitar CFP a TODOS” button in user management allows administrators to set a global data entry restriction date for all users except administrators.Use Case: End-of-period data freezes for reporting or auditing

User Attributes

Each user account includes the following attributes:

Username (usd)

Unique identifier, lowercase, max 16 characters

Password (pwd)

Authentication credential, max 16 characters

Permissions (permisos)

Role code determining access level

Circunscripción

Geographic jurisdiction assignment

Nota/Description

User description or full name

Authorization Date

Data entry period restriction

Viewing User List

The user management page displays all users with their key attributes:

Format: Username > Permissions > Circunscripción > Nota > Authorization Date
Example: jdoe > 1 > UR1 Posadas > John Doe > 01-01-2024

Users are sorted by:

Authorization date
Username (alphabetically)

Common Role Scenarios

Regional Officer
Court Official
Specialized Investigator
System Administrator

Scenario: Police officer working in Regional Unit 5Configuration:

Username: oficial.ur5
Permission Code: 5
Circunscripción: UR5 Oberá
Access: Full CRUD operations for UR5 preventive reports

Scenario: Administrative staff at First Circumscription Court 3Configuration:

Username: juzgado3.consulta
Permission Code: 23
Circunscripción: Primera Circunscripción
Access: Read-only consultation of court-related cases

Scenario: Investigator in the Toxicology unitConfiguration:

Username: toxico.investigador
Permission Code: 93
Circunscripción: Unidad Toxicología
Access: Drug-related case management and investigation tools

Scenario: IT staff managing the systemConfiguration:

Username: admin.sistema
Permission Code: 0
Circunscripción: Administración Central
Access: Full system access, user management, all modules

Role Security Considerations

Important Security Notes:

Permission codes are stored and compared as plain text
No role hierarchy or inheritance system exists
Role changes take effect immediately upon login
No audit trail for role modifications
Consider implementing:
- Role change logging
- Temporary role elevation
- Role expiration dates
- Multi-factor authentication for privileged roles

Get Started

User Guides

​Overview

​Permission Structure

​Role Categories

​Administrator Roles

System Administrator

Administrative Staff

​Regional Unit Roles

​Judicial Personnel Roles

​Specialized Department Roles

Traffic Department

Suicide Investigation

Traffic Homicide

Dependent Resources

Home Escape Cases

UNICEF Unit

Toxicology

Subsecretaría

Data Entry Unit

Operations

​Federal Crimes Unit

Federal Crimes Department

​Special Access Roles

​Text-Based Roles

​Role Assignment Process

​Permission Features

​Data Entry Period Restriction

​Bulk Permission Management

Batch Period Restriction

​User Attributes

Username (usd)

Password (pwd)

Permissions (permisos)

Circunscripción

Nota/Description

Authorization Date

​Viewing User List

​Common Role Scenarios

​Role Security Considerations

​Next Steps

Authentication

Navigation

Build docs developers (and LLMs) love

Overview

Permission Structure

Role Categories

Administrator Roles

Regional Unit Roles

Judicial Personnel Roles

Specialized Department Roles

Federal Crimes Unit

Special Access Roles

Text-Based Roles

Role Assignment Process

Permission Features

Data Entry Period Restriction

Bulk Permission Management

User Attributes

Viewing User List

Common Role Scenarios

Role Security Considerations

Next Steps