feat(rbac): enforce procurement write restrictions and support supervisor role in SSO

2026-09-26 12:32:01 +03:30
parent 730d0bd496
commit 5a9b543040
31 changed files with 480 additions and 139 deletions
@@ -203,7 +203,7 @@ class UserCreate(APIModel):
    last_name: str = ""
    phone: str | None = None
    casdoor_id: str | None = None
-    role: Literal["pm", "procurement_manager", "admin"] | None = None
+    role: Literal["pm", "procurement_manager", "admin", "supervisor"] | None = None


 class UserRoleUpdate(APIModel):