feat(roles): let each section decide who may assign work to others

Section access now only creates a record for yourself. Assigning it to a colleague requires a separate permission on that section.

Co-authored-by: Cursor <cursoragent@cursor.com>

apps/web/src/views/TicketFormView.vue

@@ -4,7 +4,7 @@ import { RouterLink, useRoute, useRouter } from 'vue-router';
 import axios from 'axios';
 import { api } from '@/lib/api';
 import { formatJalaliDateTime } from '@/lib/jalali';
-import { canViewAllRecords } from '@/lib/roles';
+import { canAssignToOthers } from '@/lib/assign-access';
 import { useAuthStore } from '@/stores/auth';
 import {
   UiBadge,
@@ -61,7 +61,7 @@ const faqHints = ref<FaqArticleDto[]>([]);
 const csatScore = ref<number | null>(null);
 const csatComment = ref('');
 
-const canAssignOthers = computed(() => canViewAllRecords(auth.user?.role));
+const canAssignOthers = computed(() => canAssignToOthers(auth.user, 'tickets'));
 
 const showCsat = computed(() => {
   if (!ticket.value || isNew.value) return false;