I am having trouble with code design for current scenario of process workflow. For example, by default it is set in the app that for some request 'A' direct manager has the authority to 'approve' that but later on, this approval authority has been moved to 'department head'. How can I accommodate these changes without modifying code in future.
I am thinking on lines of creating access templates, assigning them to permission groups and adding users to those groups.
Any help on what might be problems with my proposed approach or better solutions is much needed.
The user requirement might change for authorization even after deployment of system and this change needs to have minimum overhead.