c4d3433cc9
- Add UI components: confirm-delete-dialog, empty-table-row, list-pagination, pagination, status-badge - Add form-fields directory for reusable form field components - Add hooks: use-action-mutation, use-action-query for server action integration - Add action-utils lib for action state helpers - Update a11y components, charts, global-search, onboarding-gate, question components - Update UI components: chip-nav, filter-bar, page-header, stat-card, stat-item, switch, table - Update hooks: use-action-with-toast, use-aria-live, use-debounce, use-local-storage, use-media-query, use-permission - Update lib: a11y, ai, audit-logger, auth-guard, bcrypt-utils, change-logger, download, excel, file-storage, http-utils, login-logger, password-policy, password-security-service, permissions, rate-limit, role-utils, search-params, session, storage-provider - Update types: action-state, permissions - Update i18n messages (en, zh-CN) for dashboard, diagnostic, grades, lesson-preparation, settings
234 lines
7.1 KiB
TypeScript
234 lines
7.1 KiB
TypeScript
import { Permissions, type Permission, type Role } from "@/shared/types/permissions"
|
|
|
|
// Role → Permission mapping
|
|
// New roles only need to add an entry here + seed the DB
|
|
export const ROLE_PERMISSIONS: Record<Role, Permission[]> = {
|
|
admin: [
|
|
Permissions.EXAM_CREATE,
|
|
Permissions.EXAM_READ,
|
|
Permissions.EXAM_UPDATE,
|
|
Permissions.EXAM_DELETE,
|
|
Permissions.EXAM_DUPLICATE,
|
|
Permissions.EXAM_PUBLISH,
|
|
Permissions.EXAM_AI_GENERATE,
|
|
Permissions.HOMEWORK_CREATE,
|
|
Permissions.HOMEWORK_GRADE,
|
|
Permissions.QUESTION_CREATE,
|
|
Permissions.QUESTION_READ,
|
|
Permissions.QUESTION_UPDATE,
|
|
Permissions.QUESTION_DELETE,
|
|
Permissions.TEXTBOOK_CREATE,
|
|
Permissions.TEXTBOOK_READ,
|
|
Permissions.TEXTBOOK_UPDATE,
|
|
Permissions.TEXTBOOK_DELETE,
|
|
Permissions.CLASS_CREATE,
|
|
Permissions.CLASS_READ,
|
|
Permissions.CLASS_UPDATE,
|
|
Permissions.CLASS_DELETE,
|
|
Permissions.CLASS_ENROLL,
|
|
Permissions.CLASS_SCHEDULE,
|
|
Permissions.SCHOOL_MANAGE,
|
|
Permissions.GRADE_MANAGE,
|
|
Permissions.USER_MANAGE,
|
|
Permissions.USER_PROFILE_UPDATE,
|
|
Permissions.AI_CHAT,
|
|
Permissions.AI_CONFIGURE,
|
|
Permissions.SETTINGS_ADMIN,
|
|
Permissions.AUDIT_LOG_READ,
|
|
Permissions.ANNOUNCEMENT_MANAGE,
|
|
Permissions.ANNOUNCEMENT_READ,
|
|
Permissions.GRADE_RECORD_MANAGE,
|
|
Permissions.GRADE_RECORD_READ,
|
|
Permissions.COURSE_PLAN_MANAGE,
|
|
Permissions.COURSE_PLAN_READ,
|
|
Permissions.ATTENDANCE_MANAGE,
|
|
Permissions.ATTENDANCE_READ,
|
|
Permissions.MESSAGE_SEND,
|
|
Permissions.MESSAGE_READ,
|
|
Permissions.MESSAGE_DELETE,
|
|
Permissions.SCHEDULE_AUTO,
|
|
Permissions.SCHEDULE_ADJUST,
|
|
Permissions.ELECTIVE_MANAGE,
|
|
Permissions.ELECTIVE_READ,
|
|
Permissions.EXAM_PROCTOR,
|
|
Permissions.EXAM_PROCTOR_READ,
|
|
Permissions.DIAGNOSTIC_MANAGE,
|
|
Permissions.DIAGNOSTIC_READ,
|
|
Permissions.LESSON_PLAN_CREATE,
|
|
Permissions.LESSON_PLAN_READ,
|
|
Permissions.LESSON_PLAN_UPDATE,
|
|
Permissions.LESSON_PLAN_DELETE,
|
|
Permissions.LESSON_PLAN_PUBLISH,
|
|
Permissions.FILE_UPLOAD,
|
|
Permissions.FILE_READ,
|
|
Permissions.FILE_DELETE,
|
|
Permissions.DASHBOARD_ADMIN_READ,
|
|
Permissions.ERROR_BOOK_ANALYTICS_READ,
|
|
],
|
|
teacher: [
|
|
Permissions.EXAM_CREATE,
|
|
Permissions.EXAM_READ,
|
|
Permissions.EXAM_UPDATE,
|
|
Permissions.EXAM_DELETE,
|
|
Permissions.EXAM_DUPLICATE,
|
|
Permissions.EXAM_PUBLISH,
|
|
Permissions.EXAM_AI_GENERATE,
|
|
Permissions.HOMEWORK_CREATE,
|
|
Permissions.HOMEWORK_GRADE,
|
|
Permissions.QUESTION_CREATE,
|
|
Permissions.QUESTION_READ,
|
|
Permissions.QUESTION_UPDATE,
|
|
Permissions.QUESTION_DELETE,
|
|
Permissions.TEXTBOOK_CREATE,
|
|
Permissions.TEXTBOOK_READ,
|
|
Permissions.TEXTBOOK_UPDATE,
|
|
Permissions.CLASS_READ,
|
|
Permissions.CLASS_ENROLL,
|
|
Permissions.CLASS_SCHEDULE,
|
|
Permissions.USER_PROFILE_UPDATE,
|
|
Permissions.AI_CHAT,
|
|
Permissions.ANNOUNCEMENT_READ,
|
|
Permissions.GRADE_RECORD_MANAGE,
|
|
Permissions.GRADE_RECORD_READ,
|
|
Permissions.COURSE_PLAN_READ,
|
|
Permissions.ATTENDANCE_MANAGE,
|
|
Permissions.ATTENDANCE_READ,
|
|
Permissions.MESSAGE_SEND,
|
|
Permissions.MESSAGE_READ,
|
|
Permissions.MESSAGE_DELETE,
|
|
Permissions.ELECTIVE_MANAGE,
|
|
Permissions.ELECTIVE_READ,
|
|
Permissions.EXAM_PROCTOR,
|
|
Permissions.EXAM_PROCTOR_READ,
|
|
Permissions.DIAGNOSTIC_MANAGE,
|
|
Permissions.DIAGNOSTIC_READ,
|
|
Permissions.LESSON_PLAN_CREATE,
|
|
Permissions.LESSON_PLAN_READ,
|
|
Permissions.LESSON_PLAN_UPDATE,
|
|
Permissions.LESSON_PLAN_DELETE,
|
|
Permissions.LESSON_PLAN_PUBLISH,
|
|
Permissions.DASHBOARD_TEACHER_READ,
|
|
Permissions.ERROR_BOOK_ANALYTICS_READ,
|
|
],
|
|
student: [
|
|
Permissions.EXAM_READ,
|
|
Permissions.EXAM_SUBMIT,
|
|
Permissions.HOMEWORK_SUBMIT,
|
|
Permissions.QUESTION_READ,
|
|
Permissions.TEXTBOOK_READ,
|
|
Permissions.CLASS_READ,
|
|
Permissions.USER_PROFILE_UPDATE,
|
|
Permissions.AI_CHAT,
|
|
Permissions.ANNOUNCEMENT_READ,
|
|
Permissions.GRADE_RECORD_READ,
|
|
Permissions.COURSE_PLAN_READ,
|
|
Permissions.ATTENDANCE_READ,
|
|
Permissions.MESSAGE_SEND,
|
|
Permissions.MESSAGE_READ,
|
|
Permissions.MESSAGE_DELETE,
|
|
Permissions.ELECTIVE_SELECT,
|
|
Permissions.ELECTIVE_READ,
|
|
Permissions.DIAGNOSTIC_READ,
|
|
Permissions.DASHBOARD_STUDENT_READ,
|
|
Permissions.ERROR_BOOK_READ,
|
|
Permissions.ERROR_BOOK_MANAGE,
|
|
],
|
|
parent: [
|
|
Permissions.EXAM_READ,
|
|
Permissions.TEXTBOOK_READ,
|
|
Permissions.CLASS_READ,
|
|
Permissions.USER_PROFILE_UPDATE,
|
|
Permissions.ANNOUNCEMENT_READ,
|
|
Permissions.GRADE_RECORD_READ,
|
|
Permissions.ATTENDANCE_READ,
|
|
Permissions.MESSAGE_SEND,
|
|
Permissions.MESSAGE_READ,
|
|
Permissions.MESSAGE_DELETE,
|
|
Permissions.DASHBOARD_PARENT_READ,
|
|
Permissions.ERROR_BOOK_READ,
|
|
],
|
|
grade_head: [
|
|
Permissions.EXAM_CREATE,
|
|
Permissions.EXAM_READ,
|
|
Permissions.EXAM_UPDATE,
|
|
Permissions.EXAM_DELETE,
|
|
Permissions.EXAM_DUPLICATE,
|
|
Permissions.EXAM_PUBLISH,
|
|
Permissions.EXAM_AI_GENERATE,
|
|
Permissions.HOMEWORK_CREATE,
|
|
Permissions.HOMEWORK_GRADE,
|
|
Permissions.QUESTION_CREATE,
|
|
Permissions.QUESTION_READ,
|
|
Permissions.QUESTION_UPDATE,
|
|
Permissions.QUESTION_DELETE,
|
|
Permissions.TEXTBOOK_CREATE,
|
|
Permissions.TEXTBOOK_READ,
|
|
Permissions.TEXTBOOK_UPDATE,
|
|
Permissions.CLASS_CREATE,
|
|
Permissions.CLASS_READ,
|
|
Permissions.CLASS_UPDATE,
|
|
Permissions.CLASS_ENROLL,
|
|
Permissions.CLASS_SCHEDULE,
|
|
Permissions.GRADE_MANAGE,
|
|
Permissions.USER_PROFILE_UPDATE,
|
|
Permissions.AI_CHAT,
|
|
Permissions.ANNOUNCEMENT_READ,
|
|
Permissions.GRADE_RECORD_READ,
|
|
Permissions.COURSE_PLAN_READ,
|
|
Permissions.ATTENDANCE_READ,
|
|
Permissions.MESSAGE_SEND,
|
|
Permissions.MESSAGE_READ,
|
|
Permissions.MESSAGE_DELETE,
|
|
Permissions.ELECTIVE_READ,
|
|
Permissions.EXAM_PROCTOR_READ,
|
|
Permissions.DIAGNOSTIC_MANAGE,
|
|
Permissions.DIAGNOSTIC_READ,
|
|
Permissions.ERROR_BOOK_ANALYTICS_READ,
|
|
],
|
|
teaching_head: [
|
|
Permissions.EXAM_CREATE,
|
|
Permissions.EXAM_READ,
|
|
Permissions.EXAM_UPDATE,
|
|
Permissions.EXAM_DELETE,
|
|
Permissions.EXAM_DUPLICATE,
|
|
Permissions.EXAM_PUBLISH,
|
|
Permissions.EXAM_AI_GENERATE,
|
|
Permissions.HOMEWORK_CREATE,
|
|
Permissions.HOMEWORK_GRADE,
|
|
Permissions.QUESTION_CREATE,
|
|
Permissions.QUESTION_READ,
|
|
Permissions.QUESTION_UPDATE,
|
|
Permissions.QUESTION_DELETE,
|
|
Permissions.TEXTBOOK_CREATE,
|
|
Permissions.TEXTBOOK_READ,
|
|
Permissions.TEXTBOOK_UPDATE,
|
|
Permissions.CLASS_READ,
|
|
Permissions.GRADE_MANAGE,
|
|
Permissions.USER_PROFILE_UPDATE,
|
|
Permissions.AI_CHAT,
|
|
Permissions.ANNOUNCEMENT_READ,
|
|
Permissions.GRADE_RECORD_READ,
|
|
Permissions.COURSE_PLAN_READ,
|
|
Permissions.ATTENDANCE_READ,
|
|
Permissions.MESSAGE_SEND,
|
|
Permissions.MESSAGE_READ,
|
|
Permissions.MESSAGE_DELETE,
|
|
Permissions.ELECTIVE_READ,
|
|
Permissions.EXAM_PROCTOR_READ,
|
|
Permissions.DIAGNOSTIC_READ,
|
|
Permissions.ERROR_BOOK_ANALYTICS_READ,
|
|
],
|
|
}
|
|
|
|
/**
|
|
* Merge permissions from all roles (deduplicated)
|
|
*/
|
|
export function resolvePermissions(roleNames: Role[]): Permission[] {
|
|
const set = new Set<Permission>()
|
|
for (const name of roleNames) {
|
|
const perms = ROLE_PERMISSIONS[name] ?? []
|
|
for (const p of perms) set.add(p)
|
|
}
|
|
return Array.from(set)
|
|
}
|