feat(09-11): add permissioned admin metadata and settings

cabana/auth_test.go

@@ -205,6 +205,13 @@ func TestAdminAuthLogging(t *testing.T) {
 	gdb := adminGorm(t)
 	h := adminHandler(t, gdb, nil)
 	user := insertAdmin(t, gdb, "logged", "logged@example.test", adminTestPassword, true, false)
+	var publisherID uint
+	if err := gdb.Raw(`SELECT id FROM backend_user_roles WHERE code = 'publisher'`).Scan(&publisherID).Error; err != nil || publisherID == 0 {
+		t.Fatalf("publisher role: id=%d err=%v", publisherID, err)
+	}
+	if err := gdb.Model(&cabana.BackendUser{}).Where("id = ?", user.ID).Update("role_id", publisherID).Error; err != nil {
+		t.Fatal(err)
+	}
 	var buf bytes.Buffer
 	prev := slog.Default()
 	slog.SetDefault(slog.New(slog.NewJSONHandler(&buf, nil)))
@@ -436,6 +443,9 @@ func (p demoPlugin) Boot(*backpack.App) error     { return nil }
 func (p demoPlugin) AdminControllers() []pact.AdminController {
 	return []pact.AdminController{demoController{}}
 }
+func (p demoPlugin) Permissions() []pact.Permission {
+	return []pact.Permission{{Code: "acme.demo.access", Roles: []string{"developer"}}}
+}
 func (p demoPlugin) AdminFS() fs.FS { return p.fsys }
 
 type demoController struct{}