feat(roles): let each section decide who may assign work to others

Section access now only creates a record for yourself. Assigning it to a colleague requires a separate permission on that section.

Co-authored-by: Cursor <cursoragent@cursor.com>

apps/web/src/views/TeamSettingsView.vue

@@ -56,11 +56,18 @@ const router = useRouter();
 /** مجوزی که ماژولش در سوپرادمین خاموش است در نقش‌ها نشان داده نمی‌شود. */
 const PERMISSION_MODULES: Partial<Record<RolePermissionKey, OrgModuleKey[]>> = {
   customers: ['customers'],
+  assign_customers: ['customers'],
   leads: ['leads'],
+  assign_leads: ['leads'],
   sales: ['pipeline'],
+  assign_sales: ['pipeline'],
   billing: ['invoices', 'quotes'],
   products: ['products'],
   activities: ['activities'],
+  assign_activities: ['activities'],
+  assign_routines: ['routines'],
+  assign_projects: ['project_boards'],
+  assign_tickets: ['tickets'],
   notes: ['notes'],
   reports: ['reports'],
   audit: ['audit_logs'],