"Add Notes" for Centers permission is missing
Now user can add notes to centers with out permissions. Permission should be assigned separately for Read, Create, Edit and Delete options.
Documentation for the notes API can be found at https://demo.openmf.org/api-docs/apiLive.htm#notes
From a microfinance perspective, clients can be aggregated for applying Joint liability principles. Such a collection of clients is called a Group. Some organizations would want to further extend this aggregation, so you have collections of Groups which are called Centers etc.
In Mifosx, Centers were originally modeled as specializations of Groups (centers are also stored in m_group table with level_id set to 1, the level_id for groups is 2), for easier use through the API though, separate API's were created for Centers https://demo.openmf.org/api-docs/apiLive.htm#centers, which are mostly abstraction over the Group API with new center specific permissions.
Talks about now extending notes API to have a center specific abstractions (with its own permissions), so we need a new notes api which would look like
, also the existing group notes API i.e
should no longer work for centers
So basically you want to check if the user has privileges to add a note and then allow/disallow the user to add notes?