package entities import ( "database/sql/driver" "encoding/json" "time" "github.com/google/uuid" "gorm.io/gorm" ) type UserRole string const ( RoleSuperAdmin UserRole = "superadmin" RoleAdmin UserRole = "admin" RoleManager UserRole = "manager" RoleCashier UserRole = "cashier" RoleWaiter UserRole = "waiter" ) type Permissions map[string]interface{} func (p Permissions) Value() (driver.Value, error) { if p == nil { return "{}", nil } return json.Marshal(p) } func (p *Permissions) Scan(value interface{}) error { if value == nil { *p = make(Permissions) return nil } switch v := value.(type) { case []byte: if len(v) == 0 || string(v) == "{}" { *p = make(Permissions) return nil } // Try to unmarshal, if it fails, return empty permissions if err := json.Unmarshal(v, p); err != nil { *p = make(Permissions) return nil } return nil case string: if v == "" || v == "{}" { *p = make(Permissions) return nil } // Try to unmarshal, if it fails, return empty permissions if err := json.Unmarshal([]byte(v), p); err != nil { *p = make(Permissions) return nil } return nil default: *p = make(Permissions) return nil } } type User struct { ID uuid.UUID `gorm:"type:uuid;primary_key;default:gen_random_uuid()" json:"id"` OrganizationID uuid.UUID `gorm:"type:uuid;not null;index" json:"organization_id" validate:"required"` OutletID *uuid.UUID `gorm:"type:uuid;index" json:"outlet_id"` Name string `gorm:"not null;size:255" json:"name" validate:"required,min=1,max=255"` Email string `gorm:"uniqueIndex;not null;size:255" json:"email" validate:"required,email"` PasswordHash string `gorm:"not null;size:255" json:"-"` Role UserRole `gorm:"not null;size:50" json:"role" validate:"required,oneof=admin manager cashier waiter"` Permissions Permissions `gorm:"type:jsonb;default:'{}'" json:"permissions"` IsActive bool `gorm:"default:true" json:"is_active"` CreatedAt time.Time `gorm:"autoCreateTime" json:"created_at"` UpdatedAt time.Time `gorm:"autoUpdateTime" json:"updated_at"` Organization Organization `gorm:"foreignKey:OrganizationID" json:"organization,omitempty"` Outlet *Outlet `gorm:"foreignKey:OutletID" json:"outlet,omitempty"` Orders []Order `gorm:"foreignKey:UserID" json:"orders,omitempty"` } func (u *User) BeforeCreate(tx *gorm.DB) error { if u.ID == uuid.Nil { u.ID = uuid.New() } if u.Permissions == nil { u.Permissions = make(Permissions) } return nil } func (u *User) BeforeUpdate(tx *gorm.DB) error { if u.Permissions == nil { u.Permissions = make(Permissions) } return nil } func (User) TableName() string { return "users" } func (u *User) HasPermission(permission string) bool { if u.Role == RoleAdmin { return true } if value, exists := u.Permissions[permission]; exists { if hasPermission, ok := value.(bool); ok { return hasPermission } } return false } func (u *User) CanAccessOutlet(outletID uuid.UUID) bool { if u.Role == RoleAdmin { return true } if u.OutletID != nil && *u.OutletID == outletID { return true } return false }