feat(roles): let each section decide who may assign work to others

Section access now only creates a record for yourself. Assigning it to a colleague requires a separate permission on that section. Co-authored-by: Cursor <cursoragent@cursor.com>
2026-11-03 13:15:21 +03:30
parent 79733e6c96
commit 534dae45b2
25 changed files with 355 additions and 84 deletions
@@ -41,7 +41,9 @@ export const SYSTEM_ROLE_SEEDS: Array<{
    name: 'کارشناس فروش',
    description: 'امکان دسترسی به بخش‌های فروش و مشتریان برای انجام فعالیت‌های روزمره.',
    color: 'teal',
-    permissions: ALL_ROLE_PERMISSIONS.filter((key) => key !== 'audit'),
+    permissions: ALL_ROLE_PERMISSIONS.filter(
+      (key) => key !== 'audit' && !key.startsWith('assign_'),
+    ),
  },
  {
    systemKey: 'support',