initial

apps/backend/src/roles/permissions.ts

@@ -0,0 +1,25 @@
+export enum Permission {
+  ItemsRead = 'items.read',
+  ItemsCreate = 'items.create',
+  ItemsUpdate = 'items.update',
+  ItemsDelete = 'items.delete',
+  UsersRead = 'users.read',
+  UsersManage = 'users.manage',
+  RolesRead = 'roles.read',
+  RolesManage = 'roles.manage',
+  AuditRead = 'audit.read',
+  SessionsReadOwn = 'sessions.readOwn',
+  SessionsRevokeOwn = 'sessions.revokeOwn',
+  SessionsManage = 'sessions.manage',
+}
+
+export const allPermissions = Object.values(Permission);
+
+export const administrativePermissions = [
+  Permission.UsersRead,
+  Permission.UsersManage,
+  Permission.RolesRead,
+  Permission.RolesManage,
+  Permission.AuditRead,
+  Permission.SessionsManage,
+] as const;