easy-admin-rails 0.1.14 → 0.2.0

data/app/policies/application_policy.rb

@@ -0,0 +1,83 @@
+class ApplicationPolicy < ActionPolicy::Base
+  # Configure authorization context
+  authorize :user, allow_nil: true
+  
+  # Make this the default policy for EasyAdmin models
+  self.identifier = :application
+  
+  # Basic authorization rules using EasyAdmin permissions
+  def index?
+    user_has_permission?("#{resource_name}:read")
+  end
+  
+  def show?
+    user_has_permission?("#{resource_name}:read")
+  end
+  
+  def create?
+    user_has_permission?("#{resource_name}:create")
+  end
+  
+  def update?
+    user_has_permission?("#{resource_name}:update")
+  end
+  
+  def destroy?
+    user_has_permission?("#{resource_name}:delete")
+  end
+  
+  # Versioning permissions (requires update permission + additional versioning permission)
+  def manage_versions?
+    user_has_permission?("#{resource_name}:update") && user_has_permission?("#{resource_name}:manage_versions")
+  end
+  
+  # Batch actions permission (requires update permission + batch action permission)
+  def batch_action?
+    user_has_permission?("#{resource_name}:update") && user_has_permission?("#{resource_name}:batch_actions")
+  end
+  
+  # Row actions permission (requires read permission + row action permission)
+  def row_action?
+    user_has_permission?("#{resource_name}:read") && user_has_permission?("#{resource_name}:row_actions")
+  end
+  
+
+  private
+  
+  def user_has_permission?(permission_name, context: nil)
+    EasyAdmin::Permissions.authorized?(user, permission_name, context: context)
+  end
+  
+  def admin_user?
+    # Check if user has admin privileges through EasyAdmin permissions
+    return false unless user
+    
+    # Check if user has a super_admin or admin role
+    if user.respond_to?(:role) && user.role
+      return true if %w[super_admin admin].include?(user.role.slug)
+    end
+    
+    # Fallback: check if user has manage permissions for admin_users
+    user_has_permission?("admin_users:manage") || user_has_permission?("admin_users:create")
+  end
+  
+  def resource_name
+    if record.is_a?(Class)
+      # For class-level authorization
+      model_class = record
+    else
+      # For instance-level authorization  
+      model_class = record.class
+    end
+    
+    # Handle EasyAdmin namespaced models
+    class_name = model_class.name
+    if class_name.start_with?('EasyAdmin::')
+      # Extract the model name after the namespace
+      class_name.split('::').last.underscore
+    else
+      # Regular models
+      class_name.underscore
+    end
+  end
+end

data/app/views/easy_admin/application/authorization_failure.turbo_stream.erb

@@ -0,0 +1,8 @@
+<%= turbo_stream.update "notifications" do %>
+  <%== EasyAdmin::NotificationComponent.new(
+    type: :error,
+    title: "Access Denied",
+    message: @error_message,
+    duration: 6000
+  ).call %>
+<% end %>

data/app/views/easy_admin/dashboards/card.html.erb

@@ -0,0 +1,5 @@
+<%== EasyAdmin::Dashboards::CardStreamComponent.new(
+  card: @card,
+  card_data: @card_data,
+  dashboard_class: @dashboard_class
+).call %>

data/app/views/easy_admin/dashboards/card.turbo_stream.erb

@@ -0,0 +1,7 @@
+<%= turbo_stream.replace "card_#{@card[:name]}" do %>
+  <%== EasyAdmin::Dashboards::CardStreamComponent.new(
+    card: @card,
+    card_data: @card_data,
+    dashboard_class: @dashboard_class
+  ).call %>
+<% end %>

data/app/views/easy_admin/dashboards/card_error.html.erb

@@ -0,0 +1,3 @@
+<turbo-frame id="card_<%= params[:card_name] %>">
+  <%== EasyAdmin::Dashboards::CardErrorComponent.new(error: @error_message).call %>
+</turbo-frame>

data/app/views/easy_admin/dashboards/card_error.turbo_stream.erb

@@ -0,0 +1,5 @@
+<%= turbo_stream.replace "card_#{params[:card_name]}" do %>
+  <turbo-frame id="card_<%= params[:card_name] %>">
+    <%== EasyAdmin::Dashboards::CardErrorComponent.new(error: @error_message).call %>
+  </turbo-frame>
+<% end %>

data/app/views/easy_admin/dashboards/show.turbo_stream.erb

@@ -0,0 +1,7 @@
+<%= turbo_stream.replace "dashboard-grid" do %>
+  <%== EasyAdmin::Dashboards::ShowComponent.new(
+    dashboard_class: @dashboard_class,
+    params: dashboard_params,
+    request_path: request.path
+  ).call %>
+<% end %>

data/app/views/easy_admin/resources/belongs_to_edit_attached.html.erb

@@ -0,0 +1,6 @@
+<%== EasyAdmin::Fields::BelongsToEditModalComponent.new(
+  record: @associated_record,
+  resource_class: @associated_resource_class,
+  parent_record: @record,
+  parent_field: @field_config
+).call %>

data/app/views/easy_admin/resources/belongs_to_edit_attached.turbo_stream.erb

@@ -0,0 +1,8 @@
+<%= turbo_stream.update "modal" do %>
+  <%== EasyAdmin::Fields::BelongsToEditModalComponent.new(
+    record: @associated_record,
+    resource_class: @associated_resource_class,
+    parent_record: @record,
+    parent_field: @field_config
+  ).call %>
+<% end %>

data/app/views/easy_admin/resources/belongs_to_reattach.html.erb

@@ -0,0 +1,5 @@
+<%== EasyAdmin::Fields::InlineEditModalComponent.new(
+  record: @record,
+  field_config: @select_field_config,
+  resource_class: @resource_class
+).call %>

data/app/views/easy_admin/resources/edit.html.erb

@@ -117,7 +117,7 @@
 
     <!-- Form Fields -->
     <% if @resource_class.has_form_tabs? %>
-      <%= EasyAdmin::FormTabsComponent.new(resource_class: @resource_class, form: form).call.html_safe %>
+      <%= EasyAdmin::FormTabsComponent.new(resource_class: @resource_class, form: form, record: @record).call.html_safe %>
     <% else %>
       <!-- Default Single Card Layout -->
       <div class="bg-white shadow-sm rounded-lg border border-gray-200">

data/app/views/easy_admin/resources/edit_field.html.erb

@@ -0,0 +1,5 @@
+<%== EasyAdmin::Fields::InlineEditModalComponent.new(
+  record: @record,
+  field_config: @field_config,
+  resource_class: @resource_class
+).call %>

data/app/views/easy_admin/resources/edit_field.turbo_stream.erb

@@ -0,0 +1,7 @@
+<%= turbo_stream.update "modal" do %>
+  <%== EasyAdmin::Fields::InlineEditModalComponent.new(
+    record: @record,
+    field_config: @field_config,
+    resource_class: @resource_class
+  ).call %>
+<% end %>

data/app/views/easy_admin/resources/index.html.erb

@@ -1,4 +1,4 @@
-<% content_for :title, @resource_class.title %>
+<% content_for :page_title, @resource_class.title %>
 
 <%== EasyAdmin::Resources::IndexComponent.new(
   resource_class: @resource_class,

data/app/views/easy_admin/resources/index_frame.html.erb

@@ -1,142 +1,8 @@
-<turbo-frame id="table-frame">
-  <!-- Striped Table -->
-  <div class="mt-8 flow-root">
-    <div class="mobile-table-wrapper -mx-4 -my-2 overflow-x-auto sm:-mx-6 lg:-mx-8">
-      <div class="inline-block min-w-full py-2 align-middle sm:px-6 lg:px-8">
-        <div class="overflow-hidden shadow ring-1 ring-black ring-opacity-5 md:rounded-lg">
-          <table class="table-striped min-w-full divide-y divide-gray-300">
-            <thead class="bg-gray-50">
-              <tr>
-                <% @resource_class.index_fields.each_with_index do |field, index| %>
-                  <th scope="col" class="px-6 py-3 text-left text-xs font-medium text-gray-500 uppercase tracking-wide <%= 'mobile-hide' if index > 2 %>">
-                    <% if field[:sortable] %>
-                      <div class="flex items-center justify-between">
-                        <% 
-                          # Determine next direction: if currently sorting by this field and direction is 'asc', toggle to 'desc'
-                          # Otherwise default to 'asc' for new sort or when toggling from 'desc'
-                          next_direction = (params[:sort] == field[:name].to_s && params[:direction] == 'asc') ? 'desc' : 'asc'
-                        %>
-                        <%= link_to url_for(request.params.merge(sort: field[:name], direction: next_direction)), 
-                                    class: "group hover:text-gray-900 transition-colors duration-150" do %>
-                          <%= field[:label] %>
-                        <% end %>
-                        <span class="ml-2 flex-none text-gray-400 hover:text-gray-600">
-                          <% if params[:sort] == field[:name].to_s %>
-                            <% if params[:direction] == 'asc' %>
-                              <svg class="h-4 w-4" viewBox="0 0 20 20" fill="currentColor">
-                                <path fill-rule="evenodd" d="M14.77 12.79a.75.75 0 01-1.06-.02L10 8.832 6.29 12.77a.75.75 0 11-1.08-1.04l4.25-4.5a.75.75 0 011.08 0l4.25 4.5a.75.75 0 01-.02 1.06z" clip-rule="evenodd"/>
-                              </svg>
-                            <% else %>
-                              <svg class="h-4 w-4" viewBox="0 0 20 20" fill="currentColor">
-                                <path fill-rule="evenodd" d="M5.23 7.21a.75.75 0 011.06.02L10 11.168l3.71-3.938a.75.75 0 111.08 1.04l-4.25 4.5a.75.75 0 01-1.08 0l-4.25-4.5a.75.75 0 01.02-1.06z" clip-rule="evenodd"/>
-                              </svg>
-                            <% end %>
-                          <% else %>
-                            <svg class="h-4 w-4" viewBox="0 0 20 20" fill="currentColor">
-                              <path fill-rule="evenodd" d="M5.23 7.21a.75.75 0 011.06.02L10 11.168l3.71-3.938a.75.75 0 111.08 1.04l-4.25 4.5a.75.75 0 01-1.08 0l-4.25-4.5a.75.75 0 01.02-1.06z" clip-rule="evenodd"/>
-                            </svg>
-                          <% end %>
-                        </span>
-                      </div>
-                    <% else %>
-                      <%= field[:label] %>
-                    <% end %>
-                  </th>
-                <% end %>
-                <th scope="col" class="relative px-6 py-3">
-                  <span class="sr-only">Actions</span>
-                </th>
-              </tr>
-            </thead>
-            <tbody id="records-container" class="divide-y divide-gray-200 bg-white">
-              <% @records.each do |record| %>
-                <tr class="hover:bg-gray-100 cursor-pointer transition-colors duration-150" 
-                    onclick="window.location='<%= easy_admin.resource_path(@resource_class.route_key, record) %>'">
-                  <% @resource_class.index_fields.each_with_index do |field, index| %>
-                    <td class="whitespace-nowrap px-6 py-4 text-sm <%= 'mobile-hide' if index > 2 %>">
-                      <div class="text-gray-900 font-medium">
-                        <%== render_field(field, action: :index, value: record.public_send(field[:name]), record: record) %>
-                      </div>
-                    </td>
-                  <% end %>
-                  <td class="relative whitespace-nowrap py-4 pl-3 pr-4 text-right text-sm font-medium sm:pr-6">
-                    <div class="flex items-center justify-end space-x-2 sm:mobile-actions">
-                      <%= link_to easy_admin.resource_path(@resource_class.route_key, record), 
-                                  class: "inline-flex items-center justify-center w-8 h-8 text-blue-600 hover:text-blue-800 hover:bg-blue-50 rounded-lg transition-colors duration-150", 
-                                  onclick: "event.stopPropagation()",
-                                  title: "View" do %>
-                        <svg class="h-4 w-4" fill="none" stroke="currentColor" viewBox="0 0 24 24">
-                          <path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M15 12a3 3 0 11-6 0 3 3 0 016 0z"/>
-                          <path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M2.458 12C3.732 7.943 7.523 5 12 5c4.478 0 8.268 2.943 9.542 7-1.274 4.057-5.064 7-9.542 7-4.477 0-8.268-2.943-9.542-7z"/>
-                        </svg>
-                      <% end %>
-                      <%= link_to easy_admin.edit_resource_path(@resource_class.route_key, record), 
-                                  class: "inline-flex items-center justify-center w-8 h-8 text-green-600 hover:text-green-800 hover:bg-green-50 rounded-lg transition-colors duration-150", 
-                                  onclick: "event.stopPropagation()",
-                                  title: "Edit" do %>
-                        <svg class="h-4 w-4" fill="none" stroke="currentColor" viewBox="0 0 24 24">
-                          <path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M11 5H6a2 2 0 00-2 2v11a2 2 0 002 2h11a2 2 0 002-2v-5m-1.414-9.414a2 2 0 112.828 2.828L11.828 15H9v-2.828l8.586-8.586z"/>
-                        </svg>
-                      <% end %>
-                      <%= link_to easy_admin.resource_path(@resource_class.route_key, record), 
-                                  method: :delete, 
-                                  class: "inline-flex items-center justify-center w-8 h-8 text-red-600 hover:text-red-800 hover:bg-red-50 rounded-lg transition-colors duration-150",
-                                  onclick: "event.stopPropagation()",
-                                  title: "Delete",
-                                  data: { 
-                                    confirm: "Are you sure you want to delete this #{@resource_class.singular_title.downcase}?",
-                                    method: :delete
-                                  } do %>
-                        <svg class="h-4 w-4" fill="none" stroke="currentColor" viewBox="0 0 24 24">
-                          <path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M19 7l-.867 12.142A2 2 0 0116.138 21H7.862a2 2 0 01-1.995-1.858L5 7m5 4v6m4-6v6m1-10V4a1 1 0 00-1-1h-4a1 1 0 00-1 1v3M4 7h16"/>
-                        </svg>
-                      <% end %>
-                    </div>
-                  </td>
-                </tr>
-              <% end %>
-            </tbody>
-          </table>
-        </div>
-      </div>
-    </div>
-  </div>
-
-  <!-- Pagination within the turbo frame -->
-  <div id="infinite-scroll-container">
-    <% if @resource_class.respond_to?(:infinite_scroll_enabled?) && @resource_class.infinite_scroll_enabled? %>
-      <%== EasyAdmin::InfiniteScrollComponent.new(
-            pagy: @pagy,
-            resource_class: @resource_class,
-            current_params: params.permit(:search, :scope, :sort, :direction, :period, :page, q: {}),
-            current_path: request.path
-          ).call %>
-    <% else %>
-      <%== EasyAdmin::ResourcePaginationComponent.new(
-            pagy: @pagy,
-            resource_class: @resource_class,
-            request_params: params
-          ).call %>
-    <% end %>
-  </div>
-
-  <!-- Empty state within the turbo frame -->
-  <% if @records.empty? && @pagy.page == 1 %>
-    <div class="text-center py-12">
-      <svg class="mx-auto h-12 w-12 text-gray-400" fill="none" viewBox="0 0 24 24" stroke="currentColor">
-        <path vector-effect="non-scaling-stroke" stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M9 13h6m-3-3v6m-9 1V7a2 2 0 012-2h6l2 2h6a2 2 0 012 2v6a2 2 0 01-2 2H5a2 2 0 01-2-2z"/>
-      </svg>
-      <h3 class="mt-2 text-sm font-semibold text-gray-900">No <%= @resource_class.title.downcase %></h3>
-      <p class="mt-1 text-sm text-gray-500">Get started by creating a new <%= @resource_class.singular_title.downcase %>.</p>
-      <div class="mt-6">
-        <%= link_to easy_admin.new_resource_path(@resource_class.route_key), 
-                    class: "inline-flex items-center rounded-md bg-blue-600 px-3 py-2 text-sm font-semibold text-white shadow-sm hover:bg-blue-500 focus-visible:outline focus-visible:outline-2 focus-visible:outline-offset-2 focus-visible:outline-blue-600" do %>
-          <svg class="-ml-0.5 mr-1.5 h-5 w-5" viewBox="0 0 20 20" fill="currentColor">
-            <path d="M10.75 4.75a.75.75 0 00-1.5 0v4.5h-4.5a.75.75 0 000 1.5h4.5v4.5a.75.75 0 001.5 0v-4.5h4.5a.75.75 0 000-1.5h-4.5v-4.5z"/>
-          </svg>
-          New <%= @resource_class.singular_title %>
-        <% end %>
-      </div>
-    </div>
-  <% end %>
-</turbo-frame>
+<%== EasyAdmin::Resources::IndexFrameComponent.new(
+  resource_class: @resource_class,
+  records: @records,
+  pagy: @pagy,
+  current_params: @current_params,
+  current_path: request.path,
+  current_user: current_admin_user
+).call %>

data/app/views/easy_admin/resources/update_belongs_to_attached.turbo_stream.erb

@@ -0,0 +1,25 @@
+<% if @success %>
+  <%= turbo_stream.replace "#{dom_id(@record)}_#{@association_name}" do %>
+    <%== EasyAdmin::Resources::TableCellComponent.new(
+      record: @record.reload,
+      field_config: @field_config,
+      resource_class: @resource_class
+    ).call %>
+  <% end %>
+  
+  <%= turbo_stream.update "notifications" do %>
+    <%== EasyAdmin::NotificationComponent.new(
+      type: :success,
+      message: "#{@field_config[:label]} updated successfully!",
+      title: "Success"
+    ).call %>
+  <% end %>
+<% else %>
+  <%= turbo_stream.update "notifications" do %>
+    <%== EasyAdmin::NotificationComponent.new(
+      type: :error,
+      message: @attached_record.errors.full_messages.join(', '),
+      title: "Error"
+    ).call %>
+  <% end %>
+<% end %>

data/app/views/layouts/easy_admin/application.html.erb

@@ -20,11 +20,12 @@
   </svg>
 </button>
 
-<%== EasyAdmin::SidebarComponent.new(current_path: request.path).call %>
+<%== EasyAdmin::SidebarComponent.new(current_path: request.path, current_user: current_admin_user).call %>
 
 <%== EasyAdmin::NavbarComponent.new(
   page_title: content_for?(:page_title) ? yield(:page_title) : "Dashboard",
-  breadcrumbs: content_for?(:breadcrumbs) ? yield(:breadcrumbs) : nil
+  breadcrumbs: content_for?(:breadcrumbs) ? yield(:breadcrumbs) : nil,
+  current_user: current_admin_user
 ).call %>
 
 <main class="flex-1 overflow-x-hidden overflow-y-auto bg-gray-50 lg:ml-64 transition-all duration-300" data-sidebar-target="content">
@@ -33,6 +34,18 @@
   </div>
 </main>
 
+<!-- Flash Messages -->
+<% if flash.any? %>
+  <% flash.each do |type, message| %>
+    <% next if message.blank? %>
+    <%== EasyAdmin::NotificationComponent.new(
+      type: flash_type_to_notification_type(type),
+      message: message,
+      duration: 6000
+    ).call %>
+  <% end %>
+<% end %>
+
 <!-- Notifications Turbo Frame -->
 <turbo-frame id="notifications"></turbo-frame>
 

data/config/initializers/easy_admin_permissions.rb

@@ -0,0 +1,73 @@
+EasyAdmin::Permissions.configure do |config|
+  # Enable the permissions system
+  config.enabled = true
+  
+  # Cache duration for permission lookups (default: 1 hour)
+  config.cache_duration = 1.hour
+  
+  # Allow admin users to bypass permissions (default: true)
+  config.admin_bypass = true
+  
+  # Set the user model class name (default: 'User')
+  config.user_class 'EasyAdmin::AdminUser'
+  
+  # Define permission contexts (optional - for scoped permissions)
+
+  # config.contexts :organization, :project
+
+end
+
+# Define your permissions here
+# Note: This will only run if the database tables exist
+if ActiveRecord::Base.connection.table_exists?(:easy_admin_permissions)
+  EasyAdmin::Permissions.define do
+    # Dashboard permissions
+    permission :dashboard, :view, description: "Access admin dashboard"
+  
+    # Admin user management permissions
+    resource :admin_users, actions: [:read, :create, :update, :delete]
+    permission :admin_users, :manage_roles, description: "Assign and remove user roles"
+    
+    # Reports permissions
+    permission :reports, :view, description: "View reports"
+    permission :reports, :export, description: "Export reports"
+    
+    # Settings permissions
+    permission :settings, :read, description: "View system settings"
+    permission :settings, :update, description: "Update system settings"
+    
+    # Role definitions
+    role :super_admin, 
+         description: "Full system access", 
+         permissions: %w[
+           dashboard:view admin_users:read admin_users:create admin_users:update 
+           admin_users:delete admin_users:manage_roles reports:view reports:export
+           settings:read settings:update
+         ]
+    
+    role :admin, 
+         description: "Administrative access with user management",
+         permissions: %w[
+           dashboard:view admin_users:read admin_users:create admin_users:update 
+           admin_users:manage_roles reports:view reports:export settings:read
+         ]
+    
+    role :manager,
+         description: "Management access with limited user permissions", 
+         permissions: %w[
+           dashboard:view admin_users:read admin_users:update reports:view reports:export
+         ]
+    
+    role :editor,
+         description: "Content editing permissions",
+         permissions: %w[
+           dashboard:view admin_users:read
+         ]
+    
+    role :viewer,
+         description: "Read-only access",
+         permissions: %w[
+           dashboard:view admin_users:read reports:view
+         ]
+  end
+end

data/db/seeds/easy_admin_permissions.rb

@@ -0,0 +1,121 @@
+# EasyAdmin Permission System Seeds
+# Load these seeds after running: rails easy_admin:permissions:install
+
+puts "🔐 Setting up EasyAdmin Permission System..."
+
+# Create basic permissions
+permissions_data = [
+  # Dashboard permissions
+  { name: "dashboard:view", resource_type: "dashboard", action: "view", description: "Access admin dashboard" },
+  
+  # User management permissions
+  { name: "admin_users:read", resource_type: "admin_users", action: "read", description: "View admin users" },
+  { name: "admin_users:create", resource_type: "admin_users", action: "create", description: "Create new admin users" },
+  { name: "admin_users:update", resource_type: "admin_users", action: "update", description: "Edit existing admin users" },
+  { name: "admin_users:delete", resource_type: "admin_users", action: "delete", description: "Delete admin users" },
+  { name: "admin_users:manage_roles", resource_type: "admin_users", action: "manage_roles", description: "Assign and remove user roles" },
+  
+  # Reports permissions
+  { name: "reports:view", resource_type: "reports", action: "view", description: "View reports" },
+  { name: "reports:export", resource_type: "reports", action: "export", description: "Export reports" },
+  
+  # Settings permissions
+  { name: "settings:read", resource_type: "settings", action: "read", description: "View system settings" },
+  { name: "settings:update", resource_type: "settings", action: "update", description: "Update system settings" }
+]
+
+puts "  Creating permissions..."
+permissions = {}
+permissions_data.each do |perm_data|
+  permission = EasyAdmin::Permissions::Permission.find_or_create_by(name: perm_data[:name]) do |p|
+    p.resource_type = perm_data[:resource_type]
+    p.action = perm_data[:action]
+    p.description = perm_data[:description]
+  end
+  permissions[perm_data[:name]] = permission
+  puts "    ✓ #{perm_data[:name]}"
+end
+
+# Create roles
+roles_data = [
+  {
+    name: "Super Admin",
+    slug: "super_admin",
+    description: "Full system access - all permissions",
+    permissions: permissions.keys
+  },
+  {
+    name: "Admin", 
+    slug: "admin",
+    description: "Administrative access with user management",
+    permissions: [
+      "dashboard:view", "admin_users:read", "admin_users:create", "admin_users:update", "admin_users:manage_roles",
+      "reports:view", "reports:export", "settings:read"
+    ]
+  },
+  {
+    name: "Manager",
+    slug: "manager", 
+    description: "Management access with limited user permissions",
+    permissions: [
+      "dashboard:view", "admin_users:read", "admin_users:update", "reports:view", "reports:export"
+    ]
+  },
+  {
+    name: "Editor",
+    slug: "editor",
+    description: "Content editing permissions", 
+    permissions: [
+      "dashboard:view", "admin_users:read"
+    ]
+  },
+  {
+    name: "Viewer",
+    slug: "viewer",
+    description: "Read-only access",
+    permissions: [
+      "dashboard:view", "admin_users:read", "reports:view"
+    ]
+  }
+]
+
+puts "  Creating roles..."
+roles_data.each do |role_data|
+  role = EasyAdmin::Permissions::Role.find_or_create_by(slug: role_data[:slug]) do |r|
+    r.name = role_data[:name]
+    r.description = role_data[:description]
+    r.active = true
+  end
+  
+  # Assign permissions to role
+  role_data[:permissions].each do |permission_name|
+    permission = permissions[permission_name]
+    if permission
+      EasyAdmin::Permissions::RolePermission.find_or_create_by(
+        role: role, 
+        permission: permission
+      )
+    end
+  end
+  
+  puts "    ✓ #{role_data[:name]} (#{role.permissions.count} permissions)"
+end
+
+# Assign super admin role to the first admin user
+if EasyAdmin::AdminUser.exists?
+  first_admin = EasyAdmin::AdminUser.first
+  super_admin_role = EasyAdmin::Permissions::Role.find_by(slug: "super_admin")
+  
+  if first_admin && super_admin_role
+    first_admin.assign_role(super_admin_role)
+    puts "  ✓ Assigned Super Admin role to #{first_admin.email}"
+  end
+end
+
+puts "✅ EasyAdmin Permission System setup complete!"
+puts ""
+puts "Next steps:"
+puts "1. Configure permissions in config/initializers/easy_admin_permissions.rb"
+puts "2. Assign roles to users: admin_user.assign_role(:admin)"
+puts "3. Check permissions: admin_user.has_permission?('admin_users:read')"
+puts ""

data/lib/easy-admin-rails.rb

@@ -5,6 +5,7 @@ require "easy_admin/version"
 require "easy_admin/configuration"
 require "easy_admin/resource_registry"
 require "easy_admin/versioning"
+require "easy_admin/resource_modules"
 require "easy_admin/resource"
 require "easy_admin/dashboard_registry"
 require "easy_admin/dashboard"
@@ -12,6 +13,7 @@ require "easy_admin/field"
 require "easy_admin/action"
 require "easy_admin/delete_action"
 require "easy_admin/batch_action"
+require "easy_admin/permissions"
 require "easy_admin/engine"
 
 module EasyAdmin