feat: add permission-gated navigation and admin access

src/app/(modules)/users/components/UserColumns.tsx

@@ -6,6 +6,8 @@ import { Edit, RotateCcw } from 'lucide-react';
 
 import { Badge } from '@/components/ui/badge';
 import { Button } from '@/components/ui/button';
+import { PERMISSIONS } from '@/constants/permissions';
+import { usePermissions } from '@/hooks/usePermissions';
 import type { AdministrationUser } from '@/types';
 
 function formatDate(value?: string | null) {
@@ -28,8 +30,12 @@ export function useUserColumns({
   onToggleStatus,
   pendingUserId,
 }: UseUserColumnsParams): ColumnDef<AdministrationUser>[] {
-  return useMemo(
-    () => [
+  const { hasPermission } = usePermissions();
+  const canEdit = hasPermission(PERMISSIONS.USER.UPDATE);
+  const canDelete = hasPermission(PERMISSIONS.USER.DELETE);
+
+  return useMemo(() => {
+    const columns: ColumnDef<AdministrationUser>[] = [
       {
         accessorKey: 'first_name',
         header: 'Name',
@@ -80,16 +86,23 @@ export function useUserColumns({
           </Badge>
         ),
       },
-      {
-        id: 'actions',
-        header: () => <div className="text-right">Actions</div>,
-        cell: ({ row }) => {
-          const user = row.original;
-          return (
-            <div className="flex justify-end gap-2">
+    ];
+
+    if (!canEdit && !canDelete) return columns;
+
+    columns.push({
+      id: 'actions',
+      header: () => <div className="text-right">Actions</div>,
+      cell: ({ row }) => {
+        const user = row.original;
+        return (
+          <div className="flex justify-end gap-2">
+            {canEdit ? (
               <Button variant="outline" size="sm" onClick={() => onEdit(user)}>
                 <Edit className="size-4" />
               </Button>
+            ) : null}
+            {canDelete ? (
               <Button
                 variant="outline"
                 size="sm"
@@ -99,11 +112,12 @@ export function useUserColumns({
                 <RotateCcw className="mr-2 size-4" />
                 {user.effective_status === 'active' ? 'Deactivate' : 'Activate'}
               </Button>
-            </div>
-          );
-        },
+            ) : null}
+          </div>
+        );
       },
-    ],
-    [onEdit, onToggleStatus, pendingUserId],
-  );
+    });
+
+    return columns;
+  }, [canDelete, canEdit, onEdit, onToggleStatus, pendingUserId]);
 }

src/app/(modules)/users/page.tsx

@@ -6,6 +6,8 @@ import { Plus, Users } from 'lucide-react';
 import { PageHeader } from '@/components/page-header';
 import { PoweredBy } from '@/components/powered-by';
 import { Button } from '@/components/ui/button';
+import { PERMISSIONS } from '@/constants/permissions';
+import { PermissionGuard } from '@/guards';
 import type { AdministrationUser } from '@/types';
 
 import { useUserColumns } from './components/UserColumns';
@@ -103,10 +105,12 @@ export default function UsersPage() {
           description="Manage users and role assignment"
           icon={Users}
           actions={
-            <Button onClick={openCreate}>
-              <Plus className="mr-2 size-4" />
-              Add User
-            </Button>
+            <PermissionGuard permissions={PERMISSIONS.USER.CREATE}>
+              <Button onClick={openCreate}>
+                <Plus className="mr-2 size-4" />
+                Add User
+              </Button>
+            </PermissionGuard>
           }
         />