feat: add user and role view sheets with detailed information display

- Created UserViewSheet component to display user details including username, full name, role, status, and timestamps.
- Created RoleViewSheet component to display role details including name, level, status, creation date, and associated permissions.
- Introduced permissions configuration in a new permissions.ts file, defining categories and permission codes for better management.
- Implemented middleware for authentication, ensuring access control for protected routes.

Distribution/Infra/Authorization/AuthorizationController.cs

@@ -0,0 +1,71 @@
+using Microsoft.AspNetCore.Mvc;
+
+namespace Distribution.Infra.Authorization;
+
+[ApiController]
+[Route("api/authorization")]
+public class AuthorizationController(
+    IPermissionService permissionService,
+    IScopeAccessService scopeAccessService,
+    ICurrentUserService currentUser) : ControllerBase
+{
+    [HttpGet("permissions/{permissionCode}")]
+    public async Task<IActionResult> CheckPermission(string permissionCode)
+    {
+        if (currentUser.RoleId is not { } roleId) return Unauthorized();
+        var result = await permissionService.HasPermissionAsync(roleId, permissionCode);
+        return Ok(new PermissionCheckResponse(result));
+    }
+
+    [HttpGet("my-permissions")]
+    public async Task<IActionResult> GetMyPermissions()
+    {
+        if (currentUser.RoleId is not { } roleId) return Unauthorized();
+        var permissions = await permissionService.GetRolePermissionsAsync(roleId);
+        return Ok(new RolePermissionsResponse(permissions));
+    }
+
+    [HttpGet("scopes/stores/{storeId:guid}")]
+    public async Task<IActionResult> CheckStoreScope(Guid storeId)
+    {
+        if (currentUser.UserId is not { } userId) return Unauthorized();
+        var result = await scopeAccessService.HasStoreScopeAsync(userId, storeId);
+        return Ok(new StoreScopeCheckResponse(result));
+    }
+
+    [HttpGet("scopes/routes/{routeId:guid}")]
+    public async Task<IActionResult> CheckRouteScope(Guid routeId)
+    {
+        if (currentUser.UserId is not { } userId) return Unauthorized();
+        var result = await scopeAccessService.HasRouteScopeAsync(userId, routeId);
+        return Ok(new RouteScopeCheckResponse(result));
+    }
+
+    [HttpGet("scopes/regions/{regionId:guid}")]
+    public async Task<IActionResult> CheckRegionScope(Guid regionId)
+    {
+        if (currentUser.UserId is not { } userId) return Unauthorized();
+        var result = await scopeAccessService.HasRegionScopeAsync(userId, regionId);
+        return Ok(new RegionScopeCheckResponse(result));
+    }
+
+    [HttpGet("scopes/stores")]
+    public async Task<IActionResult> GetAccessibleStores()
+    {
+        if (currentUser.UserId is not { } userId) return Unauthorized();
+        var result = await scopeAccessService.GetAccessibleStoreIdsAsync(userId);
+        return Ok(new AccessibleStoresResponse(result));
+    }
+}
+
+[ApiController]
+[Route("api/permissions")]
+public class PermissionController(IPermissionService permissionService) : ControllerBase
+{
+    [HttpGet]
+    public async Task<IActionResult> GetAll()
+    {
+        var permissions = await permissionService.GetAllAsync();
+        return Ok(permissions.Select(p => new { permissionId = p.Id, p.Code, p.Description }));
+    }
+}