How Does a Hybrid Role-Permission Architecture Solve Multi-Level Site Management Challenges?

New Ground Management Challenges: CWRG Registration Card Files and Subcontractor Management Loopholes

Since the launch of the CIC platform, ground management has always faced a thorny problem: CWRG registration card file records are the responsibility of the main contractor, but workers employed by subcontractors cannot be managed under a unified lead. This management loophole causes the main contractor and subcontractors to each act independently, reinventing the wheel, with low efficiency. Especially when a worker leaves, ground management personnel should not directly "delete" historical files; instead, they must update the "end date" in the worker registration form to the date of departure. Under Chapter 583 of the Laws of Hong Kong, the Construction Workers Registration Ordinance, the main contractor must submit Daily Attendance Records (DAR) on time. When a worker leaves, the worker's ground access should be disabled or updated in the system within the next submission cycle (within 7 days) or on the day the worker leaves, ensuring they can no longer tap their card at that ground.

DGX HRMS proposes a solution to this problem: providing a subcontractor worker management interface, enabling the main contractor and subcontractors to share one platform system without each reinventing the wheel.

DGX HRMS Software System Composition

The DGX HRMS attendance and payroll management system consists of multiple modules, including attendance devices, role and permission system, reports, Email Account, software information, industry solutions, development function business, system management, and more. Each module is designed to improve the efficiency and accuracy of ground management.

A. 📌Attendance Devices

DGX HRMS supports a variety of attendance devices, including card readers, biometric devices, and more, ensuring the accuracy of worker attendance records. Device data is synchronized to the system in real time, making it convenient for management personnel to check at any time.

B. 📌Role and Permission System

Roles are specifically defined according to business conditions; the above roles are based on common situations. The DGX HRMS role and permission system adopts a hybrid policy-and-role architecture, enabling administrators to flexibly configure permissions to adapt to the management needs of different grounds.

B.1 Hybrid Policy and Role Architecture System

B.1.1 Design and Architecture Concept

The hybrid architecture combines the advantages of role-based and policy-based permission management. Role-based permission management facilitates batch authorization, while policy-based permission management provides more fine-grained control. Through the hybrid architecture, DGX HRMS can both meet the complex permission needs of large grounds and maintain the flexibility of the system.

B.1.2 Configuring Permissions and Roles, Described Specifically Below for Easy Understanding:

System Administrator SystemAdmin: Has the highest permissions, can manage all grounds, roles, and users, set permission definitions, and set permissions and policies.

Company Administrator Admin: Responsible for the management of a single ground or company, can authorize company operators, and set permissions and policies.

Company Operator MainComOperator: Daily operations personnel, such as attendance record management, report generation, and more.

B.1.3 Requiring Both Specific Roles and Permissions

The system supports assigning users both specific roles and permissions at the same time. For example, a user can be a company administrator while also having attendance management permissions for a certain ground. This flexibility ensures seamless cooperation between the main contractor and subcontractors.

C.📌Reports

DGX HRMS provides a variety of reports, including attendance reports, payroll reports, and more, helping management personnel quickly understand ground conditions. Reports can be exported in multiple formats for easy archiving and sharing.

D. 📌Email Account

The system can be configured with an Email Account for sending notifications and reports, ensuring information is conveyed in a timely manner.

E. 📌Software Information

The software information module displays the system version and update records, making it convenient for administrators to understand the system status.

F. 📌Industry Solutions

DGX HRMS provides specialized solutions for the construction industry, including CWRG registration card file management, Daily Attendance Record (DAR) submission, and more, complying with Hong Kong legal requirements.

G. 📌Development Function Business

The system supports development function business and can customize specific functions according to customer needs, improving the applicability of the system.

H. 📌System Management

The system management module contains multiple sub-functions, allowing administrators to fully control the system.

H.1 User Role Authorization

Administrators can assign roles to users and set corresponding permissions.

H.2 Role Definition List

The system provides a role definition list, and administrators can view and edit role permissions.

H.3 Role Authorization

Administrators can authorize roles to access specific functions or data.

H.4 Company Service Review

The company service review function allows administrators to review service requests between companies, ensuring smooth cooperation.

H.5 Configuration ./CONFIG

Administrators can adjust system parameters through configuration ./CONFIG to adapt to the needs of different grounds.

H.6 Multilingual Management

The system supports multilingual management, making it convenient for users from different language backgrounds.

H.7 System Users

Administrators can manage system users, including adding, editing, and disabling users.

H.8 Batch Import of Attendance List

Administrators can batch import attendance lists, saving time and manpower.

Practical Application Scenario: Worker Departure Processing

Suppose worker Chan Tai Man leaves. Ground management personnel need to perform the following steps:

1. First [manually adjust] the clock-out card to complete the missing clock-out attendance for that day.
2. Next, enter a payroll payment in lieu of notice of 7 days = 20000* 7/30, by adding an [account detail] entry and noting it as "Payroll 7-day payment in lieu of notice". (Because the attendance for that day is not yet complete, time is needed for calculation.)
3. Then go to payroll attendance deduction: approval confirmation (once approved, it will not continue to be calculated every day), the purpose is 20,000 - 15 days of attendance deduction = 10,000.
4. If the attendance KPI reward and penalty mechanism also needs to be executed, then the KPI assessment for the corresponding month needs to be approved, assuming it is 0.
5. If there are still [additional payroll calculation items], they need to be confirmed or canceled.
6. Then in the payroll account, query Chan Tai Man by the monthly settlement list and carry out the approval confirmation process. The final result is 10,000 + 20000* 7/30.

In plain terms: the remaining scheduled shifts within the unfinished settlement cycle (monthly) that should be deducted, as well as the working time for lateness and early departure, constitute the attendance deduction amount.

After completing the bank transfer, click [Settlement] to enter the relevant transaction number, bank information, and so on, output the report for archiving, and the entire process is complete.

Supplementary note: the deductions and financial items generated above have already been approved and do not affect the system calculations generated on the next day.

System-calculated accounting codes are marked with [SYS_CALC] at the end, custom accounting codes are marked with [CUSTOMIZE] at the end, and system default accounting codes that are not logical business calculations are marked with [SYSTEM] at the end.

General leave GL: GENERALLEAVE, administrative leave ADL: ADMINISTRATIVELEAVE, sick leave SL: SICKLEAVE, annual leave AL: ANNUALLEAVE, paternity leave PL: Paternity Leave.

Conclusion

DGX HRMS's hybrid policy and role architecture, through setting permission definitions and setting permissions and policies, flexibly configures roles such as System Administrator SystemAdmin, Company Administrator Admin, and Company Operator MainComOperator, effectively solving the multi-layer management difficulties of grounds. Whether main contractor or subcontractor, both can collaborate efficiently on the same platform, improving overall management efficiency.