first commit

2026-05-26 16:00:09 +03:30
commit 83fd5c1a86
81 changed files with 6867 additions and 0 deletions
--- a/seeders/rbac.seed.ts
+++ b/seeders/rbac.seed.ts
@@ -0,0 +1,135 @@
+import { sequelize } from "../src/models";
+import { Permission } from "../src/models/Permission";
+import { Role } from "../src/models/Role";
+
+
+export async function seedRBAC() {
+  const transaction = await sequelize.transaction();
+
+  try {
+
+    /**
+     * PERMISSIONS
+     */
+
+    const permissionsList = [
+      "VIEW_APPLICANTS",
+      "CREATE_APPLICANT",
+      "EDIT_APPLICANT",
+      "DELETE_APPLICANT",
+
+      "EXPORT_APPLICANTS",
+
+      "VIEW_USERS",
+      "CREATE_USER",
+      "EDIT_USER",
+      "DELETE_USER",
+
+      "VIEW_ROLES",
+      "MANAGE_ROLES",
+
+      "SYSTEM_SETTINGS"
+    ];
+
+    const permissions: any = {};
+
+    for (const perm of permissionsList) {
+      const [permission] = await Permission.findOrCreate({
+        where: { name: perm },
+        defaults: { name: perm },
+        transaction
+      });
+
+      permissions[perm] = permission;
+    }
+
+    /**
+     * ROLES
+     */
+
+    const rolesData = [
+      {
+        name: "SUPER_ADMIN",
+        description: "دسترسی کامل به کل سیستم"
+      },
+      {
+        name: "ADMIN",
+        description: "مدیریت کاربران و رزومه‌ها"
+      },
+      {
+        name: "HR",
+        description: "کارشناس منابع انسانی"
+      },
+      {
+        name: "VIEWER",
+        description: "فقط مشاهده رزومه‌ها"
+      }
+    ];
+
+    const roles: any = {};
+
+    for (const roleData of rolesData) {
+      const [role] = await Role.findOrCreate({
+        where: { name: roleData.name },
+        defaults: roleData,
+        transaction
+      });
+
+      roles[roleData.name] = role;
+    }
+
+    /**
+     * ROLE PERMISSIONS
+     */
+
+    await roles.SUPER_ADMIN.setPermissions(Object.values(permissions), {
+      transaction
+    });
+
+    await roles.ADMIN.setPermissions(
+      [
+        permissions.VIEW_APPLICANTS,
+        permissions.CREATE_APPLICANT,
+        permissions.EDIT_APPLICANT,
+        permissions.DELETE_APPLICANT,
+        permissions.EXPORT_APPLICANTS,
+
+        permissions.VIEW_USERS,
+        permissions.CREATE_USER,
+        permissions.EDIT_USER,
+
+        permissions.VIEW_ROLES
+      ],
+      { transaction }
+    );
+
+    await roles.HR.setPermissions(
+      [
+        permissions.VIEW_APPLICANTS,
+        permissions.CREATE_APPLICANT,
+        permissions.EDIT_APPLICANT,
+        permissions.EXPORT_APPLICANTS
+      ],
+      { transaction }
+    );
+
+    await roles.VIEWER.setPermissions(
+      [
+        permissions.VIEW_APPLICANTS
+      ],
+      { transaction }
+    );
+
+    await transaction.commit();
+
+    console.log("✅ RBAC seed completed");
+
+  } catch (error) {
+
+    await transaction.rollback();
+
+    console.error("❌ RBAC seed failed:", error);
+
+    throw error;
+  }
+}