Ryan Moon 4a1fc608f0 Implement RBAC with permissions, roles, and route guards ...

- permission, role, role_permission, user_role_assignment tables
- 42 system permissions across 13 domains
- 6 default roles: Admin, Manager, Sales Associate, Technician, Instructor, Viewer
- Permission inheritance: admin implies edit implies view
- requirePermission() Fastify decorator on ALL routes
- System permissions and roles seeded per company
- Test helpers and API test runner seed RBAC data
- All 42 API tests pass with permissions enforced

2026-03-28 17:00:42 -05:00

8.3 KiB

Raw Blame History

View Raw