We need to figure out how permissions are going to be maintained for contacts. Need to discuss.

Here are my ideas on permissions for contacts as a basis point for discussion.

• View and Pay Invoices (Don't display widget without this one, don't display alert box at top about past due balances and to make payment)
• View and Manage Services (Don't display widget without this one)
• View Transactions (Don't display widget without this one)
• View and Manage Payment Accounts (Don't show Payment Accounts nav without this, don't show related box under "My Info" on dashboard for automatic payment.)
• View and Manage Contacts (Don't show Contacts nav without this)
• View and Change invoice method
• View available credits

• Detect what nav elements are available from plugins, allow access to these to be selected.
• Detect what widgets are available from plugins, allow access to these to be selected.

On Dashboard, "My Information" box on the left, should show that of the contact, not of the client. Clicking the "Change" button should allow them to change their own contact information, even if they don't have the ability to manage contacts.

For plugin enabling/disabling access simply check for all 'client' plugin actions. If a plugin has a client action, show that plugin as an access option (on/off). Only one access option per plugin.

Support manager may need to be updated to:

1. Allow contacts to email in support request IFF that contact has access to Support per the contact permission scheme.
2. Allow contacts to open tickets on behalf of the client (ticket assigned to client), but reply shown by contact
3. CC all contacts that replied to ticket at some point when ticket is updated

If a contact is deleted, it should destroy their session.