feat(rbac): enforce procurement write restrictions and support supervisor role in SSO

2026-09-26 12:32:01 +03:30
parent 730d0bd496
commit 5a9b543040
31 changed files with 480 additions and 139 deletions
@@ -174,7 +174,7 @@ _V26_DDL = [
    """,
    """
    DO $$ BEGIN
-        CREATE TYPE user_role AS ENUM ('pm', 'procurement_manager', 'admin');
+        CREATE TYPE user_role AS ENUM ('pm', 'procurement_manager', 'admin', 'supervisor');
    EXCEPTION WHEN duplicate_object THEN NULL; END $$
    """,
    """