feat: add permission-gated navigation and admin access

src/app/(modules)/roles/components/RoleColumns.tsx

@@ -6,6 +6,8 @@ import { Edit, RotateCcw } from 'lucide-react';
 
 import { Badge } from '@/components/ui/badge';
 import { Button } from '@/components/ui/button';
+import { PERMISSIONS } from '@/constants/permissions';
+import { usePermissions } from '@/hooks/usePermissions';
 import type { Role } from '@/types';
 
 interface UseRoleColumnsParams {
@@ -19,8 +21,12 @@ export function useRoleColumns({
   onToggleStatus,
   isStatusPending,
 }: UseRoleColumnsParams): ColumnDef<Role>[] {
-  return useMemo(
-    () => [
+  const { hasPermission } = usePermissions();
+  const canEdit = hasPermission(PERMISSIONS.ROLE.UPDATE);
+  const canDelete = hasPermission(PERMISSIONS.ROLE.DELETE);
+
+  return useMemo(() => {
+    const columns: ColumnDef<Role>[] = [
       {
         accessorKey: 'name',
         header: 'Name',
@@ -53,16 +59,23 @@ export function useRoleColumns({
           </Badge>
         ),
       },
-      {
-        id: 'actions',
-        header: () => <div className="text-right">Actions</div>,
-        cell: ({ row }) => {
-          const role = row.original;
-          return (
-            <div className="flex justify-end gap-2">
+    ];
+
+    if (!canEdit && !canDelete) return columns;
+
+    columns.push({
+      id: 'actions',
+      header: () => <div className="text-right">Actions</div>,
+      cell: ({ row }) => {
+        const role = row.original;
+        return (
+          <div className="flex justify-end gap-2">
+            {canEdit ? (
               <Button variant="outline" size="sm" onClick={() => onEdit(role)}>
                 <Edit className="size-4" />
               </Button>
+            ) : null}
+            {canDelete ? (
               <Button
                 variant="outline"
                 size="sm"
@@ -72,11 +85,12 @@ export function useRoleColumns({
                 <RotateCcw className="mr-2 size-4" />
                 {role.effective_status ? 'Deactivate' : 'Activate'}
               </Button>
-            </div>
-          );
-        },
+            ) : null}
+          </div>
+        );
       },
-    ],
-    [isStatusPending, onEdit, onToggleStatus],
-  );
+    });
+
+    return columns;
+  }, [canDelete, canEdit, isStatusPending, onEdit, onToggleStatus]);
 }

src/app/(modules)/roles/hooks/useRoleQueries.ts

@@ -47,10 +47,11 @@ export function useRolesQuery(params: UseRolesQueryParams) {
   });
 }
 
-export function usePermissionsTreeQuery() {
+export function usePermissionsTreeQuery(enabled: boolean) {
   const permissionsQuery = useQuery({
     queryKey: ['permissions', 'tree'],
     queryFn: permissionService.getPermissions,
+    enabled,
   });
   const permissionTree = useMemo(
     () => mapPermissionTree(permissionsQuery.data?.tree || []),

src/app/(modules)/roles/page.tsx

@@ -6,6 +6,8 @@ import { Plus, ShieldCheck } from 'lucide-react';
 import { PageHeader } from '@/components/page-header';
 import { PoweredBy } from '@/components/powered-by';
 import { Button } from '@/components/ui/button';
+import { PERMISSIONS } from '@/constants/permissions';
+import { PermissionGuard } from '@/guards';
 import { useAppStore } from '@/store/app.store';
 import type { Role } from '@/types';
 
@@ -41,7 +43,7 @@ export default function RolesPage() {
     searchTerm: debouncedSearchTerm,
     statusFilter,
   });
-  const permissionsQuery = usePermissionsTreeQuery();
+  const permissionsQuery = usePermissionsTreeQuery(isSheetOpen);
   const roleForm = useRoleForm({
     organizationId,
     permissionTree: permissionsQuery.permissionTree,
@@ -105,10 +107,12 @@ export default function RolesPage() {
           description="Manage roles and permission access"
           icon={ShieldCheck}
           actions={
-            <Button onClick={openCreate}>
-              <Plus className="mr-2 size-4" />
-              Add Role
-            </Button>
+            <PermissionGuard permissions={PERMISSIONS.ROLE.CREATE}>
+              <Button onClick={openCreate}>
+                <Plus className="mr-2 size-4" />
+                Add Role
+              </Button>
+            </PermissionGuard>
           }
         />