feat(rbac): enforce procurement write restrictions and support supervisor role in SSO

frontend/src/pages/Projects/ProjectsPage.tsx

@@ -25,6 +25,7 @@ import { faNum, fmtDate } from "../../lib/formatters";
 import { Header, PageLayout } from "../../components/layout/Header";
 import { EmptyState } from "../../components/EmptyState";
 import { Button } from "../../components/ui/button";
+import { useAuthStore } from "../../store/auth";
 
 function projectQuotes(quotes: Quote[], name: string): Quote[] {
   return quotes.filter(
@@ -83,6 +84,8 @@ export function ProjectsPage() {
   const { standardConversions } = useUnits();
   const addProject = useAddProject();
   const topics = useAppStore((s) => s.topics);
+  const user = useAuthStore((s) => s.user);
+  const canManage = user?.role === "admin" || user?.role === "procurement_manager";
 
   const store: Store = { quotes, suppliers, materials, projects, standardConversions, topics };
 
@@ -90,6 +93,7 @@ export function ProjectsPage() {
   const [newName, setNewName] = useState("");
 
   const addProj = () => {
+    if (!canManage) return;
     const name = newName.trim();
     if (!name) return;
     const dup = projects.some((p) => normalize(p.name) === normalize(name));
@@ -108,29 +112,31 @@ export function ProjectsPage() {
     <div className="min-h-screen">
       <Header title="پروژه‌ها" sub="روی یک پروژه کلیک کنید تا جزئیات آن باز شود" backTo="/" backLabel="بازگشت به دفتر" />
       <PageLayout className="flex flex-col gap-4">
-        <div className="add-panel">
-          <h4>＋ افزودن پروژه‌ی جدید</h4>
-          <div className="grid max-w-md grid-cols-[1fr_auto] items-end gap-2">
-            <div className="field">
-              <label>نام پروژه *</label>
-              <input
-                type="text"
-                className="h-9 w-full rounded-lg border border-line bg-panel px-3 text-sm shadow-sm focus-visible:outline-none focus-visible:ring-2 focus-visible:ring-accent/40"
-                placeholder="مثلاً برج آیتا - فاز ۳"
-                autoComplete="off"
-                value={newName}
-                onChange={(e) => setNewName(e.target.value)}
-                onKeyDown={(e) => {
-                  if (e.key === "Enter") {
-                    e.preventDefault();
-                    addProj();
-                  }
-                }}
-              />
+        {canManage && (
+          <div className="add-panel">
+            <h4>＋ افزودن پروژه‌ی جدید</h4>
+            <div className="grid max-w-md grid-cols-[1fr_auto] items-end gap-2">
+              <div className="field">
+                <label>نام پروژه *</label>
+                <input
+                  type="text"
+                  className="h-9 w-full rounded-lg border border-line bg-panel px-3 text-sm shadow-sm focus-visible:outline-none focus-visible:ring-2 focus-visible:ring-accent/40"
+                  placeholder="مثلاً برج آیتا - فاز ۳"
+                  autoComplete="off"
+                  value={newName}
+                  onChange={(e) => setNewName(e.target.value)}
+                  onKeyDown={(e) => {
+                    if (e.key === "Enter") {
+                      e.preventDefault();
+                      addProj();
+                    }
+                  }}
+                />
+              </div>
+              <Button onClick={addProj}>افزودن پروژه</Button>
             </div>
-            <Button onClick={addProj}>افزودن پروژه</Button>
           </div>
-        </div>
+        )}
 
         {!projects.length && !quotes.length ? (
           <EmptyState icon={FolderKanban} text="هنوز پروژه‌ای ثبت نشده است." />