@flusys/ng-iam 9.1.0 → 9.1.1

package/fesm2022/flusys-ng-iam.mjs

@@ -1,2 +1,2051 @@
-export { A as ActionApiService, h as ActionPermissionLogicService, b as ActionPermittedUsersDialogComponent, i as ActionProviderAdapter, a as ActionType, C as CompanyActionSelectorComponent, I as IAM_MESSAGES, j as IAM_ROUTES, L as LogicBuilderComponent, M as MAX_DROPDOWN_ITEMS, k as MyPermissionsApiService, P as PermissionApiService, l as PermissionScopeResolverService, m as PermissionStateService, n as ProfilePermissionProviderAdapter, f as RoleActionSelectorComponent, R as RoleApiService, e as RolePermittedUsersDialogComponent, g as UserActionSelectorComponent, U as UserRoleSelectorComponent, p as provideIamProviders } from './flusys-ng-iam-flusys-ng-iam-Y7U2lGZk.mjs';
-//# sourceMappingURL=flusys-ng-iam.mjs.map
+import { a as ActionPermissionLogicService, i as RoleActionSelectorComponent, n as UserRoleSelectorComponent, o as MAX_DROPDOWN_ITEMS, r as CompanyActionSelectorComponent, t as UserActionSelectorComponent } from "./flusys-ng-iam-user-action-selector.component-CAXEmJWx.mjs";
+import { t as RoleApiService } from "./flusys-ng-iam-role-api.service-OwPgmSFc.mjs";
+import { a as ActionApiService } from "./flusys-ng-iam-tree-utils-B1pBG4At.mjs";
+import { t as PermissionApiService } from "./flusys-ng-iam-permission-api.service-C7-Yxvz8.mjs";
+import * as i0 from "@angular/core";
+import { Component, Service, effect, inject, input, output, signal } from "@angular/core";
+import { ACTION_PERMISSIONS, ACTION_PROVIDER, COMPANY_ACTION_PERMISSIONS, COMPANY_API_PROVIDER, HasPermissionDirective, PROFILE_PERMISSION_PROVIDER, PermissionValidatorService, ROLE_ACTION_PERMISSIONS, ROLE_PERMISSIONS, SHARED_MESSAGES, TranslatePipe, TranslateService, USER_ACTION_PERMISSIONS, USER_PROVIDER, USER_ROLE_PERMISSIONS, anyPermissionGuard, permissionGuard, resolveTranslationModule } from "@flusys/ng-shared";
+import { APP_CONFIG, getPermissionMode, getServiceUrl, isServiceEnabled } from "@flusys/ng-core";
+import { ConfirmationService, DialogComponent, FButtonDirective, MessageService, ProgressSpinnerComponent, SelectComponent, TooltipDirective, UiIconComponent } from "@flusys/ng-ui";
+import { HttpClient } from "@angular/common/http";
+import { firstValueFrom, map, of } from "rxjs";
+import { catchError, map as map$1, tap } from "rxjs/operators";
+import { NgTemplateOutlet } from "@angular/common";
+import * as i1 from "@angular/forms";
+import { FormsModule } from "@angular/forms";
+var ActionType;
+(function(ActionType) {
+	ActionType["BACKEND"] = "backend";
+	ActionType["FRONTEND"] = "frontend";
+	ActionType["BOTH"] = "both";
+})(ActionType || (ActionType = {}));
+const IAM_MESSAGES = {
+	"action.create.success": "Action created successfully",
+	"action.create.many.success": "{{count}} actions created successfully",
+	"action.get.success": "Action retrieved successfully",
+	"action.get.by.ids.success": "Actions retrieved successfully by Ids",
+	"action.get.by.filter.success": "Actions retrieved successfully by filter",
+	"action.get.all.success": "Actions retrieved successfully",
+	"action.update.success": "Action updated successfully",
+	"action.update.many.success": "{{count}} actions updated successfully",
+	"action.delete.success": "Action deleted successfully",
+	"action.restore.success": "Action restored successfully",
+	"action.readonly.update.forbidden": "Cannot modify readonly action(s): {{names}}",
+	"action.readonly.delete.forbidden": "Cannot delete readonly action(s): {{names}}",
+	"role.create.success": "Role created successfully",
+	"role.create.many.success": "{{count}} roles created successfully",
+	"role.get.success": "Role retrieved successfully",
+	"role.get.by.ids.success": "Roles retrieved successfully by Ids",
+	"role.get.by.filter.success": "Roles retrieved successfully by filter",
+	"role.get.all.success": "Roles retrieved successfully",
+	"role.update.success": "Role updated successfully",
+	"role.update.many.success": "{{count}} roles updated successfully",
+	"role.delete.success": "Role deleted successfully",
+	"role.restore.success": "Role restored successfully",
+	"role.readonly.update.forbidden": "Cannot modify readonly role(s): {{names}}",
+	"role.readonly.delete.forbidden": "Cannot delete readonly role(s): {{names}}",
+	"permission.process.success": "Successfully processed {{total}} items: {{added}} added, {{removed}} removed",
+	"permission.user.required": "User is required for {{method}}",
+	"permission.already.exists": "Permission already exists",
+	"role.permission.actions.success": "Role actions retrieved successfully",
+	"role.permission.user.roles.success": "User roles retrieved successfully",
+	"user.action.permission.get.success": "User action permissions retrieved successfully",
+	"company.action.permission.get.success": "Company action permissions retrieved successfully",
+	"my.permission.get.success": "Permissions loaded successfully",
+	"iam.direct.mode.unavailable": "Direct permission assignment not available in RBAC-only mode",
+	"iam.rbac.mode.unavailable": "Role-based permission assignment not available in direct-only mode",
+	"iam.role.assignment.unavailable": "Role assignment not available in direct-only mode",
+	"iam.title": "Identity & Access Management",
+	"iam.subtitle": "Manage roles, permissions, and access control",
+	"iam.action.title": "Actions",
+	"iam.role.title": "Roles",
+	"iam.permission.title": "Permissions",
+	"iam.action.new": "New Action",
+	"iam.action.name": "Action Name",
+	"iam.action.code": "Action Code",
+	"iam.action.type": "Type",
+	"iam.action.no.actions": "No actions found",
+	"iam.action.type.backend": "Backend",
+	"iam.action.type.frontend": "Frontend",
+	"iam.action.type.both": "Both",
+	"iam.permission.view.users": "View Users",
+	"iam.permission.no.users": "No users found",
+	"iam.permission.remove": "Remove Access",
+	"iam.permission.remove.confirm": "Remove access for {{name}}?",
+	"iam.action.delete.title": "Delete Action",
+	"iam.company.name": "Company",
+	"iam.branch.name": "Branch",
+	"iam.branch.all": "All branches",
+	"iam.action.edit": "Edit Action",
+	"iam.action.name.placeholder": "Enter action name",
+	"iam.action.code.placeholder": "Enter action code",
+	"iam.action.parent": "Parent Action",
+	"iam.action.select.parent": "Select Parent Action",
+	"iam.action.type.backend.label": "Backend Only",
+	"iam.action.type.frontend.label": "Frontend Only",
+	"iam.action.type.both.label": "Backend & Frontend",
+	"iam.action.readonly.edit.forbidden": "This is a system action and cannot be edited",
+	"iam.company.title": "Companies",
+	"iam.role.new": "New Role",
+	"iam.role.name": "Role Name",
+	"iam.role.no.roles": "No roles found",
+	"iam.role.delete.title": "Delete Role",
+	"iam.role.edit": "Edit Role",
+	"iam.role.name.placeholder": "Enter role name",
+	"iam.role.readonly.edit.forbidden": "This is a system role and cannot be edited",
+	"iam.permission.subtitle": "Assign and manage access across roles, users, and companies",
+	"iam.permission.role.actions": "Role Actions",
+	"iam.permission.user.roles": "User Roles",
+	"iam.permission.user.actions": "User Actions",
+	"iam.permission.company.actions": "Company Actions",
+	"iam.permission.empty.role.actions.title": "Select a role to get started",
+	"iam.permission.empty.role.actions.description": "Choose a role from the dropdown above to view and manage its assigned actions.",
+	"iam.permission.empty.user.roles.title": "Select a user to get started",
+	"iam.permission.empty.user.roles.description": "Choose a user above to view and manage their assigned roles.",
+	"iam.permission.empty.user.actions.title": "Select a user to get started",
+	"iam.permission.empty.user.actions.description": "Choose a user above to view and manage their direct action permissions.",
+	"iam.permission.empty.company.actions.title": "Select a company to get started",
+	"iam.permission.empty.company.actions.description": "Choose a company from the dropdown above to view and manage its action whitelist.",
+	"iam.permission.unsaved.changes.title": "Unsaved Changes",
+	"iam.permission.unsaved.changes.message": "You have unsaved permission changes. Switching now will discard them.",
+	"iam.permission.unsaved.changes.discard": "Discard Changes",
+	"iam.logic.title": "Permission Logic",
+	"iam.logic.add.logic": "Add Logic",
+	"iam.logic.clear.logic": "Clear Logic",
+	"iam.logic.description": "Define permission requirements using AND/OR logic with actions",
+	"iam.logic.click.to.toggle": "Click to toggle",
+	"iam.logic.conditions": "{{count}} conditions",
+	"iam.logic.select.action": "Select Action...",
+	"iam.logic.actions.available": "{{count}} available",
+	"iam.logic.add.condition": "Add Condition:",
+	"iam.logic.group": "Group",
+	"iam.logic.action": "Action",
+	"iam.permission.select.role": "Select Role",
+	"iam.permission.select.role.placeholder": "Search and select a role",
+	"iam.permission.action.permissions": "Action Permissions",
+	"iam.permission.actions.available": "{{count}} actions available",
+	"iam.validation.warning.title": "Validation Warning",
+	"iam.validation.unmet.prerequisites.plural": "{{count}} selected actions have unmet prerequisites. Fix before saving or use auto-fix on save.",
+	"iam.validation.unmet.prerequisites.singular": "{{count}} selected action has unmet prerequisites. Fix before saving or use auto-fix on save.",
+	"iam.permission.requirements": "Requirements",
+	"iam.validation.unmet.prerequisites.tooltip": "This action has unmet prerequisites and will fail validation on save",
+	"iam.permission.has.prerequisites": "Has prerequisites",
+	"iam.permission.no.actions.available": "No actions available",
+	"iam.permission.no.actions.for.role": "No actions available for this role",
+	"iam.tooltip.remove.action": "Click to remove",
+	"iam.tooltip.add.action": "Click to add (auto-selects required)",
+	"iam.tooltip.assigned.to.role": "Assigned to role",
+	"iam.tooltip.click.to.remove.role": "Click to remove",
+	"iam.tooltip.click.to.assign.role": "Click to assign to role",
+	"iam.permission.select.user": "Select User",
+	"iam.permission.select.user.placeholder": "Search and select a user",
+	"iam.permission.select.branch": "Select Branch",
+	"iam.permission.select.branch.placeholder": "Search and select a branch",
+	"iam.branch.permitted.count.plural": "{{count}} permitted branches in current company",
+	"iam.branch.permitted.count": "{{count}} permitted branch in current company",
+	"iam.permission.direct.action.permissions": "Direct Action Permissions",
+	"iam.permission.no.actions.for.user": "No actions available for this user",
+	"iam.tooltip.assigned.to.user": "Assigned to user",
+	"iam.tooltip.click.to.remove.user": "Click to remove direct permission",
+	"iam.tooltip.click.to.assign.user": "Click to assign direct permission",
+	"iam.permission.company.required": "Please select a company first",
+	"iam.permission.select.company": "Select Company",
+	"iam.permission.select.company.placeholder": "Search and select a company",
+	"iam.permission.action.whitelist": "Action Whitelist",
+	"iam.permission.no.actions.for.company": "No actions available for this company",
+	"iam.tooltip.selected": "Selected",
+	"iam.tooltip.click.to.remove": "Click to remove from company whitelist",
+	"iam.tooltip.click.to.add": "Click to add to company whitelist",
+	"iam.permission.requires": "requires",
+	"iam.permission.prerequisite.validation.failed": "Prerequisite Validation Failed",
+	"iam.permission.prerequisite.error.message": "The following actions have unmet prerequisites:",
+	"iam.permission.auto.select.required": "Auto-select Required",
+	"iam.permission.actions.selected": "Actions Selected",
+	"iam.permission.auto.selected.prerequisites": "Required prerequisites have been auto-selected. Click Save to apply changes.",
+	"iam.permission.changes.reverted": "Changes Reverted",
+	"iam.permission.selection.reverted": "Selection has been reverted to the initial state.",
+	"iam.permission.role.assignments": "Role Assignments",
+	"iam.permission.roles.available": "{{count}} roles available",
+	"iam.pagination.roles.template": "Showing {first} to {last} of {totalRecords} roles",
+	"iam.permission.no.roles.available": "No roles available",
+	"iam.permission.no.roles.for.user": "No roles available for this user",
+	"iam.tooltip.click.to.remove.role.from.user": "Click to remove role",
+	"iam.tooltip.click.to.assign.role.to.user": "Click to assign role to user",
+	"iam.logic.unknown.action": "Unknown Action",
+	"iam.logic.validation.failed": "Validation Failed",
+	"iam.logic.validation.failed.message": "The following actions have unmet prerequisites:",
+	"iam.logic.validation.failed.prompt": "Would you like to:",
+	"iam.logic.auto.fix": "Auto-fix (Remove Invalid)",
+	"iam.logic.invalid.actions.removed": "Invalid Actions Removed",
+	"iam.logic.removed.actions.detail": "Removed {{count}} action(s) with unmet prerequisites. You can now save.",
+	"iam.logic.save.cancelled": "Save Cancelled",
+	"iam.logic.fix.prerequisites.manually": "Please fix the prerequisites manually before saving",
+	"iam.logic.prerequisites.satisfied": "[OK] Prerequisites Satisfied",
+	"iam.logic.all.required.selected": "All required actions are already selected.\nYou can safely add this action.",
+	"iam.logic.prerequisites.required": "Prerequisites Required ({{count}} missing)",
+	"iam.logic.click.to.auto.select": "Click to auto-select required actions",
+	"iam.logic.select.action.label": "Select Action",
+	"iam.logic.auto.select.actions": "Auto-select Actions",
+	"iam.logic.action.selected.detail": "Action selected successfully (prerequisites already satisfied)",
+	"iam.logic.auto.selected.detail": "Automatically selected {{count}} action(s) including prerequisites",
+	"iam.logic.minimum.required": " (minimum required)",
+	"iam.logic.auto.select.prompt": "Auto-select will choose {{count}} action(s){{suffix}}.",
+	"iam.logic.missing.prerequisites": "Missing Prerequisites",
+	"iam.logic.requires.conditions": "requires the following conditions to be satisfied:",
+	"iam.logic.would.you.continue": "Would you like to continue?",
+	"iam.logic.actions.selected.summary": "Actions Selected",
+	"iam.logic.selection.cancelled": "Selection Cancelled",
+	"iam.logic.action.not.added": "Action not added to whitelist",
+	"iam.logic.required.by.actions": "is required by the following action(s):",
+	"iam.logic.alternatives.available": "Alternative options available:",
+	"iam.logic.switch.to.alternatives": "Would you like to automatically switch to alternatives?",
+	"iam.logic.remove.dependents": "Removing this will also remove the dependent action(s).",
+	"iam.logic.dependency.warning": "Dependency Warning",
+	"iam.logic.use.alternatives": "Use Alternatives",
+	"iam.logic.remove.all": "Remove All",
+	"iam.logic.alternatives.applied": "Alternatives Applied",
+	"iam.logic.switched.to.alternatives": "Automatically switched to alternative action(s)",
+	"iam.logic.actions.removed": "Actions Removed",
+	"iam.logic.removed.with.dependents": "Removed {{name}} and {{count}} dependent action(s)",
+	"iam.logic.cancelled": "Cancelled",
+	"iam.logic.no.changes.made": "No changes made",
+	"iam.logic.satisfied": "(satisfied)",
+	"iam.logic.missing": "(missing)",
+	"iam.logic.invalid.node": "Invalid logic node",
+	"iam.logic.invalid": "(invalid)"
+};
+var MyPermissionsApiService = class MyPermissionsApiService {
+	http = inject(HttpClient);
+	appConfig = inject(APP_CONFIG);
+	baseUrl = `${getServiceUrl(this.appConfig, "iam")}/permissions`;
+	getMyPermissions(dto = {}) {
+		return this.http.post(`${this.baseUrl}/my-permissions`, dto);
+	}
+	static ɵfac = i0.ɵɵngDeclareFactory({
+		minVersion: "12.0.0",
+		version: "22.2.1",
+		ngImport: i0,
+		type: MyPermissionsApiService,
+		deps: [],
+		target: i0.ɵɵFactoryTarget.Service
+	});
+	static ɵprov = i0.ɵɵngDeclareService({
+		minVersion: "22.0.0",
+		version: "22.2.1",
+		ngImport: i0,
+		type: MyPermissionsApiService
+	});
+};
+i0.ɵɵngDeclareClassMetadata({
+	minVersion: "12.0.0",
+	version: "22.2.1",
+	ngImport: i0,
+	type: MyPermissionsApiService,
+	decorators: [{ type: Service }]
+});
+var PermissionStateService = class PermissionStateService {
+	permissionApi = inject(MyPermissionsApiService);
+	permissionValidator = inject(PermissionValidatorService);
+	_permissions = signal(null, ...ngDevMode ? [{ debugName: "_permissions" }] : /* istanbul ignore next */ []);
+	permissions = this._permissions.asReadonly();
+	_isLoading = signal(false, ...ngDevMode ? [{ debugName: "_isLoading" }] : /* istanbul ignore next */ []);
+	isLoading = this._isLoading.asReadonly();
+	loadPermissions(dto) {
+		this._isLoading.set(true);
+		return this.permissionApi.getMyPermissions(dto).pipe(tap((response) => {
+			this._permissions.set(response.data ?? null);
+			this._isLoading.set(false);
+			const actionCodes = response.data?.frontendActions.map((a) => a.code) ?? [];
+			this.permissionValidator.setPermissions(actionCodes);
+		}), catchError(() => {
+			this._permissions.set(null);
+			this._isLoading.set(false);
+			this.permissionValidator.clearPermissions();
+			return of(void 0);
+		}), map$1(() => void 0));
+	}
+	isLoaded() {
+		return this._permissions() !== null && this.permissionValidator.isLoaded();
+	}
+	static ɵfac = i0.ɵɵngDeclareFactory({
+		minVersion: "12.0.0",
+		version: "22.2.1",
+		ngImport: i0,
+		type: PermissionStateService,
+		deps: [],
+		target: i0.ɵɵFactoryTarget.Service
+	});
+	static ɵprov = i0.ɵɵngDeclareService({
+		minVersion: "22.0.0",
+		version: "22.2.1",
+		ngImport: i0,
+		type: PermissionStateService
+	});
+};
+i0.ɵɵngDeclareClassMetadata({
+	minVersion: "12.0.0",
+	version: "22.2.1",
+	ngImport: i0,
+	type: PermissionStateService,
+	decorators: [{ type: Service }]
+});
+var PermissionScopeResolverService = class PermissionScopeResolverService {
+	companyProvider = inject(COMPANY_API_PROVIDER);
+	async resolveCompanyInfo(companyIds) {
+		if (companyIds.length === 0 || !this.companyProvider.getCompaniesByIds) return /* @__PURE__ */ new Map();
+		try {
+			const response = await firstValueFrom(this.companyProvider.getCompaniesByIds(companyIds));
+			return new Map((response.data ?? []).map((c) => [c.id, c]));
+		} catch {
+			return /* @__PURE__ */ new Map();
+		}
+	}
+	async resolveBranchInfo(branchIds) {
+		if (branchIds.length === 0 || !this.companyProvider.getBranchesByIds) return /* @__PURE__ */ new Map();
+		try {
+			const response = await firstValueFrom(this.companyProvider.getBranchesByIds(branchIds));
+			return new Map((response.data ?? []).map((b) => [b.id, b]));
+		} catch {
+			return /* @__PURE__ */ new Map();
+		}
+	}
+	static ɵfac = i0.ɵɵngDeclareFactory({
+		minVersion: "12.0.0",
+		version: "22.2.1",
+		ngImport: i0,
+		type: PermissionScopeResolverService,
+		deps: [],
+		target: i0.ɵɵFactoryTarget.Service
+	});
+	static ɵprov = i0.ɵɵngDeclareService({
+		minVersion: "22.0.0",
+		version: "22.2.1",
+		ngImport: i0,
+		type: PermissionScopeResolverService
+	});
+};
+i0.ɵɵngDeclareClassMetadata({
+	minVersion: "12.0.0",
+	version: "22.2.1",
+	ngImport: i0,
+	type: PermissionScopeResolverService,
+	decorators: [{ type: Service }]
+});
+function toLogicNode(node) {
+	if (node.type === "action") return {
+		type: "action",
+		actionId: node.actionId
+	};
+	return {
+		type: "group",
+		operator: node.operator,
+		children: node.children?.map(toLogicNode) ?? []
+	};
+}
+function toBuilderNode(node) {
+	if (node.type === "action") return createActionNode(node.actionId);
+	return {
+		...createGroupNode(node.operator),
+		children: node.children?.map(toBuilderNode) ?? []
+	};
+}
+function createGroupNode(operator = "AND") {
+	return {
+		id: crypto.randomUUID(),
+		type: "group",
+		operator,
+		children: []
+	};
+}
+function createActionNode(actionId = "") {
+	return {
+		id: crypto.randomUUID(),
+		type: "action",
+		actionId
+	};
+}
+var LogicBuilderComponent = class LogicBuilderComponent {
+	logic = input(null, ...ngDevMode ? [{ debugName: "logic" }] : /* istanbul ignore next */ []);
+	actions = input([], ...ngDevMode ? [{ debugName: "actions" }] : /* istanbul ignore next */ []);
+	logicChange = output();
+	_builderTree = signal(null, ...ngDevMode ? [{ debugName: "_builderTree" }] : /* istanbul ignore next */ []);
+	builderLogic = this._builderTree.asReadonly();
+	constructor() {
+		effect(() => {
+			const logic = this.logic();
+			if (!logic) this._builderTree.set(null);
+			else if (!this._builderTree()) this._builderTree.set(toBuilderNode(logic));
+		});
+	}
+	initializeLogic() {
+		this.updateTreeAndEmit(createGroupNode());
+	}
+	clearLogic() {
+		this._builderTree.set(null);
+		this.logicChange.emit(null);
+	}
+	toggleOperator(nodeId) {
+		this.updateNode(nodeId, (node) => ({
+			...node,
+			operator: node.operator === "AND" ? "OR" : "AND"
+		}));
+	}
+	addChildNode(parentId, type) {
+		const newNode = type === "group" ? createGroupNode() : createActionNode();
+		this.updateNode(parentId, (node) => ({
+			...node,
+			children: [...node.children || [], newNode]
+		}));
+	}
+	removeNode(nodeId) {
+		const tree = this._builderTree();
+		if (!tree) return;
+		if (tree.id === nodeId) {
+			this.clearLogic();
+			return;
+		}
+		this.updateTreeAndEmit(this.removeNodeFromTree(tree, nodeId));
+	}
+	updateActionId(nodeId, actionId) {
+		this.updateNode(nodeId, (node) => ({
+			...node,
+			actionId
+		}));
+	}
+	updateNode(nodeId, updater) {
+		const tree = this._builderTree();
+		if (!tree) return;
+		this.updateTreeAndEmit(this.updateNodeInTree(tree, nodeId, updater));
+	}
+	updateTreeAndEmit(tree) {
+		this._builderTree.set(tree);
+		this.logicChange.emit(toLogicNode(tree));
+	}
+	updateNodeInTree(node, targetId, updater) {
+		if (node.id === targetId) return updater(node);
+		if (!node.children) return node;
+		return {
+			...node,
+			children: node.children.map((child) => this.updateNodeInTree(child, targetId, updater))
+		};
+	}
+	removeNodeFromTree(node, targetId) {
+		if (!node.children) return node;
+		return {
+			...node,
+			children: node.children.filter((child) => child.id !== targetId).map((child) => this.removeNodeFromTree(child, targetId))
+		};
+	}
+	static ɵfac = i0.ɵɵngDeclareFactory({
+		minVersion: "12.0.0",
+		version: "22.2.1",
+		ngImport: i0,
+		type: LogicBuilderComponent,
+		deps: [],
+		target: i0.ɵɵFactoryTarget.Component
+	});
+	static ɵcmp = i0.ɵɵngDeclareComponent({
+		minVersion: "17.0.0",
+		version: "22.2.1",
+		type: LogicBuilderComponent,
+		isStandalone: true,
+		selector: "lib-logic-builder",
+		inputs: {
+			logic: {
+				classPropertyName: "logic",
+				publicName: "logic",
+				isSignal: true,
+				isRequired: false,
+				transformFunction: null
+			},
+			actions: {
+				classPropertyName: "actions",
+				publicName: "actions",
+				isSignal: true,
+				isRequired: false,
+				transformFunction: null
+			}
+		},
+		outputs: { logicChange: "logicChange" },
+		ngImport: i0,
+		template: `
+    <div class="logic-builder">
+      <div class="flex justify-between items-center mb-3">
+        <h4 class="text-sm font-semibold m-0">
+          {{ 'iam.logic.title' | translate }}
+        </h4>
+        @if (!builderLogic()) {
+          <button
+            fButton
+            size="small"
+            (click)="initializeLogic()"
+          >
+            <ui-icon pButtonIcon name="plus"></ui-icon>
+            <span pButtonLabel>{{ 'iam.logic.add.logic' | translate }}</span>
+          </button>
+        } @else {
+          <button
+            fButton
+            size="small"
+            severity="danger"
+            [outlined]="true"
+            (click)="clearLogic()"
+          >
+            <ui-icon pButtonIcon name="trash"></ui-icon>
+            <span pButtonLabel>{{ 'iam.logic.clear.logic' | translate }}</span>
+          </button>
+        }
+      </div>
+
+      @if (builderLogic()) {
+        <div class="border border-surface rounded p-3 bg-surface-50 dark:bg-surface-800">
+          <div class="mb-3 text-sm text-muted-color">
+            {{ 'iam.logic.description' | translate }}
+          </div>
+
+          <!-- Root Node -->
+          <div class="text-sm bg-surface-0 dark:bg-surface-900 rounded border border-surface">
+            <ng-container
+              [ngTemplateOutlet]="nodeTemplate"
+              [ngTemplateOutletContext]="{ $implicit: builderLogic()!, depth: 0 }"
+            ></ng-container>
+          </div>
+        </div>
+      }
+    </div>
+
+    <!-- Recursive Node Template -->
+    <ng-template #nodeTemplate let-node let-depth="depth">
+      <div
+        class="p-3 border-b border-surface"
+        [class.bg-surface-0]="depth % 2 === 0"
+        [class.dark:bg-surface-900]="depth % 2 === 0"
+        [class.bg-surface-50]="depth % 2 !== 0"
+        [class.dark:bg-surface-800]="depth % 2 !== 0"
+      >
+        <div class="flex items-center gap-3 mb-2">
+          <span
+            class="node-type"
+            [class.group]="node.type === 'group'"
+            [class.action]="node.type === 'action'"
+            >{{ node.type.toUpperCase() }}</span
+          >
+
+          <div class="flex-1 flex items-center gap-2">
+            @if (node.type === 'group') {
+              <!-- Group: show operator toggle -->
+              <span
+                class="operator-badge"
+                [class.and]="node.operator === 'AND'"
+                [class.or]="node.operator !== 'AND'"
+                (click)="toggleOperator(node.id)"
+                [fTooltip]="'iam.logic.click.to.toggle' | translate"
+              >
+                {{ node.operator }}
+              </span>
+              <span class="text-muted-color text-xs"
+                >({{
+                  'iam.logic.conditions'
+                    | translate: { count: node.children?.length || 0 }
+                }})</span
+              >
+            }
+
+            @if (node.type === 'action') {
+              <f-select
+                class="flex-1"
+                [options]="actions()"
+                optionLabel="name"
+                optionValue="id"
+                [ngModel]="node.actionId"
+                (ngModelChange)="updateActionId(node.id, $event)"
+                [placeholder]="'iam.logic.select.action' | translate"
+                [filter]="true"
+              />
+            }
+          </div>
+
+          <div class="flex gap-1">
+            <button
+              fButton
+              [text]="true"
+              severity="danger"
+              size="small"
+              (click)="removeNode(node.id)"
+              [fTooltip]="'shared.remove' | translate"
+            >
+              <ui-icon pButtonIcon name="trash"></ui-icon>
+            </button>
+          </div>
+        </div>
+
+        <!-- Children for group nodes -->
+        @if (
+          node.type === 'group' && node.children && node.children.length > 0
+        ) {
+          <div class="ml-5 mt-2 pl-3 border-l-2 border-surface">
+            @for (child of node.children; track child.id) {
+              <ng-container
+                [ngTemplateOutlet]="nodeTemplate"
+                [ngTemplateOutletContext]="{ $implicit: child, depth: depth + 1 }"
+              ></ng-container>
+            }
+          </div>
+        }
+
+        <!-- Add child buttons for group nodes -->
+        @if (node.type === 'group') {
+          <div
+            class="mt-3 p-3 bg-surface-50 dark:bg-surface-800 rounded border border-dashed border-surface"
+          >
+            <div class="text-xs font-semibold text-muted-color mb-2">
+              {{ 'iam.logic.add.condition' | translate }}
+            </div>
+            <div class="flex gap-2 flex-wrap">
+              <button
+                fButton
+                size="small"
+                [outlined]="true"
+                (click)="addChildNode(node.id, 'group')"
+              >
+                <ui-icon pButtonIcon name="sitemap"></ui-icon>
+                <span pButtonLabel>{{ 'iam.logic.group' | translate }}</span>
+              </button>
+              <button
+                fButton
+                size="small"
+                severity="success"
+                [outlined]="true"
+                (click)="addChildNode(node.id, 'action')"
+              >
+                <ui-icon pButtonIcon name="bolt"></ui-icon>
+                <span pButtonLabel>{{ 'iam.logic.action' | translate }}</span>
+              </button>
+            </div>
+          </div>
+        }
+      </div>
+    </ng-template>
+  `,
+		isInline: true,
+		styles: [":host{display:block}.node-type{display:inline-flex;align-items:center;padding:.25rem .5rem;border-radius:.25rem;font-weight:600;font-size:.75rem;text-transform:uppercase}.node-type.group{background-color:var(--f-blue-100, #dbeafe);color:var(--f-blue-700, #1e40af)}.node-type.action{background-color:var(--f-green-100, #d1fae5);color:var(--f-green-700, #065f46)}:host-context(.app-dark) .node-type.group{background-color:#3b82f633;color:var(--f-blue-400, #60a5fa)}:host-context(.app-dark) .node-type.action{background-color:#22c55e33;color:var(--f-green-400, #4ade80)}.operator-badge{display:inline-flex;align-items:center;padding:.125rem .5rem;border-radius:9999px;font-weight:600;font-size:.75rem;cursor:pointer;transition:opacity .2s}.operator-badge.and{background-color:var(--f-yellow-100, #fef3c7);color:var(--f-yellow-700, #92400e)}.operator-badge.or{background-color:var(--f-indigo-100, #e0e7ff);color:var(--f-indigo-700, #3730a3)}:host-context(.app-dark) .operator-badge.and{background-color:#eab30833;color:var(--f-yellow-400, #facc15)}:host-context(.app-dark) .operator-badge.or{background-color:#6366f133;color:var(--f-indigo-400, #818cf8)}.operator-badge:hover{opacity:.8}.action-select{background-color:var(--f-surface-0, #ffffff);color:var(--f-text-color, #1f2937)}:host-context(.app-dark) .action-select{background-color:var(--f-surface-900, #1f2937);color:var(--f-text-color, #f9fafb)}.action-select:focus{outline:none;border-color:var(--f-primary-color, #3b82f6)}\n"],
+		dependencies: [
+			{
+				kind: "ngmodule",
+				type: FormsModule
+			},
+			{
+				kind: "directive",
+				type: i1.NgControlStatus,
+				selector: "[formControlName],[ngModel],[formControl]"
+			},
+			{
+				kind: "directive",
+				type: i1.NgModel,
+				selector: "[ngModel]:not([formControlName]):not([formControl])",
+				inputs: [
+					"name",
+					"disabled",
+					"ngModel",
+					"ngModelOptions"
+				],
+				outputs: ["ngModelChange"],
+				exportAs: ["ngModel"]
+			},
+			{
+				kind: "directive",
+				type: NgTemplateOutlet,
+				selector: "[ngTemplateOutlet]",
+				inputs: [
+					"ngTemplateOutletContext",
+					"ngTemplateOutlet",
+					"ngTemplateOutletInjector"
+				]
+			},
+			{
+				kind: "directive",
+				type: FButtonDirective,
+				selector: "[fButton]",
+				inputs: [
+					"severity",
+					"text",
+					"outlined",
+					"link",
+					"variant",
+					"rounded",
+					"raised",
+					"fluid",
+					"disabled",
+					"loading",
+					"loadingIcon",
+					"size",
+					"label",
+					"icon",
+					"iconPos",
+					"ariaLabel",
+					"plain"
+				]
+			},
+			{
+				kind: "component",
+				type: SelectComponent,
+				selector: "f-select",
+				inputs: [
+					"options",
+					"optionLabel",
+					"optionValue",
+					"placeholder",
+					"disabled",
+					"filter",
+					"filterBy",
+					"filterMatchMode",
+					"filterLocale",
+					"filterPlaceholder",
+					"resetFilterOnHide",
+					"autofocusFilter",
+					"emptyMessage",
+					"emptyFilterMessage",
+					"showClear",
+					"loading",
+					"loadingIcon",
+					"dropdownIcon",
+					"clearIcon",
+					"inputId",
+					"invalid",
+					"touched",
+					"styleClass",
+					"style",
+					"appendTo",
+					"editable",
+					"readonly",
+					"autofocus",
+					"checkmark",
+					"group",
+					"optionGroupLabel",
+					"optionGroupChildren",
+					"virtualScroll",
+					"virtualScrollItemSize",
+					"lazy",
+					"selectedObject"
+				],
+				outputs: [
+					"onFilter",
+					"onChange",
+					"onShow",
+					"onHide",
+					"onBlur",
+					"onFocus",
+					"onClear",
+					"onLazyLoad"
+				]
+			},
+			{
+				kind: "directive",
+				type: TooltipDirective,
+				selector: "[fTooltip]",
+				inputs: [
+					"fTooltip",
+					"tooltipPosition",
+					"positionStyle",
+					"tooltipStyleClass",
+					"disabled",
+					"tooltipEvent",
+					"showDelay",
+					"hideDelay",
+					"life",
+					"autoHide",
+					"positionTop",
+					"positionLeft",
+					"escape"
+				]
+			},
+			{
+				kind: "component",
+				type: UiIconComponent,
+				selector: "ui-icon",
+				inputs: [
+					"name",
+					"size",
+					"spin",
+					"fill",
+					"severity"
+				]
+			},
+			{
+				kind: "pipe",
+				type: TranslatePipe,
+				name: "translate"
+			}
+		]
+	});
+};
+i0.ɵɵngDeclareClassMetadata({
+	minVersion: "12.0.0",
+	version: "22.2.1",
+	ngImport: i0,
+	type: LogicBuilderComponent,
+	decorators: [{
+		type: Component,
+		args: [{
+			selector: "lib-logic-builder",
+			imports: [
+				FormsModule,
+				NgTemplateOutlet,
+				FButtonDirective,
+				SelectComponent,
+				TooltipDirective,
+				UiIconComponent,
+				TranslatePipe
+			],
+			template: `
+    <div class="logic-builder">
+      <div class="flex justify-between items-center mb-3">
+        <h4 class="text-sm font-semibold m-0">
+          {{ 'iam.logic.title' | translate }}
+        </h4>
+        @if (!builderLogic()) {
+          <button
+            fButton
+            size="small"
+            (click)="initializeLogic()"
+          >
+            <ui-icon pButtonIcon name="plus"></ui-icon>
+            <span pButtonLabel>{{ 'iam.logic.add.logic' | translate }}</span>
+          </button>
+        } @else {
+          <button
+            fButton
+            size="small"
+            severity="danger"
+            [outlined]="true"
+            (click)="clearLogic()"
+          >
+            <ui-icon pButtonIcon name="trash"></ui-icon>
+            <span pButtonLabel>{{ 'iam.logic.clear.logic' | translate }}</span>
+          </button>
+        }
+      </div>
+
+      @if (builderLogic()) {
+        <div class="border border-surface rounded p-3 bg-surface-50 dark:bg-surface-800">
+          <div class="mb-3 text-sm text-muted-color">
+            {{ 'iam.logic.description' | translate }}
+          </div>
+
+          <!-- Root Node -->
+          <div class="text-sm bg-surface-0 dark:bg-surface-900 rounded border border-surface">
+            <ng-container
+              [ngTemplateOutlet]="nodeTemplate"
+              [ngTemplateOutletContext]="{ $implicit: builderLogic()!, depth: 0 }"
+            ></ng-container>
+          </div>
+        </div>
+      }
+    </div>
+
+    <!-- Recursive Node Template -->
+    <ng-template #nodeTemplate let-node let-depth="depth">
+      <div
+        class="p-3 border-b border-surface"
+        [class.bg-surface-0]="depth % 2 === 0"
+        [class.dark:bg-surface-900]="depth % 2 === 0"
+        [class.bg-surface-50]="depth % 2 !== 0"
+        [class.dark:bg-surface-800]="depth % 2 !== 0"
+      >
+        <div class="flex items-center gap-3 mb-2">
+          <span
+            class="node-type"
+            [class.group]="node.type === 'group'"
+            [class.action]="node.type === 'action'"
+            >{{ node.type.toUpperCase() }}</span
+          >
+
+          <div class="flex-1 flex items-center gap-2">
+            @if (node.type === 'group') {
+              <!-- Group: show operator toggle -->
+              <span
+                class="operator-badge"
+                [class.and]="node.operator === 'AND'"
+                [class.or]="node.operator !== 'AND'"
+                (click)="toggleOperator(node.id)"
+                [fTooltip]="'iam.logic.click.to.toggle' | translate"
+              >
+                {{ node.operator }}
+              </span>
+              <span class="text-muted-color text-xs"
+                >({{
+                  'iam.logic.conditions'
+                    | translate: { count: node.children?.length || 0 }
+                }})</span
+              >
+            }
+
+            @if (node.type === 'action') {
+              <f-select
+                class="flex-1"
+                [options]="actions()"
+                optionLabel="name"
+                optionValue="id"
+                [ngModel]="node.actionId"
+                (ngModelChange)="updateActionId(node.id, $event)"
+                [placeholder]="'iam.logic.select.action' | translate"
+                [filter]="true"
+              />
+            }
+          </div>
+
+          <div class="flex gap-1">
+            <button
+              fButton
+              [text]="true"
+              severity="danger"
+              size="small"
+              (click)="removeNode(node.id)"
+              [fTooltip]="'shared.remove' | translate"
+            >
+              <ui-icon pButtonIcon name="trash"></ui-icon>
+            </button>
+          </div>
+        </div>
+
+        <!-- Children for group nodes -->
+        @if (
+          node.type === 'group' && node.children && node.children.length > 0
+        ) {
+          <div class="ml-5 mt-2 pl-3 border-l-2 border-surface">
+            @for (child of node.children; track child.id) {
+              <ng-container
+                [ngTemplateOutlet]="nodeTemplate"
+                [ngTemplateOutletContext]="{ $implicit: child, depth: depth + 1 }"
+              ></ng-container>
+            }
+          </div>
+        }
+
+        <!-- Add child buttons for group nodes -->
+        @if (node.type === 'group') {
+          <div
+            class="mt-3 p-3 bg-surface-50 dark:bg-surface-800 rounded border border-dashed border-surface"
+          >
+            <div class="text-xs font-semibold text-muted-color mb-2">
+              {{ 'iam.logic.add.condition' | translate }}
+            </div>
+            <div class="flex gap-2 flex-wrap">
+              <button
+                fButton
+                size="small"
+                [outlined]="true"
+                (click)="addChildNode(node.id, 'group')"
+              >
+                <ui-icon pButtonIcon name="sitemap"></ui-icon>
+                <span pButtonLabel>{{ 'iam.logic.group' | translate }}</span>
+              </button>
+              <button
+                fButton
+                size="small"
+                severity="success"
+                [outlined]="true"
+                (click)="addChildNode(node.id, 'action')"
+              >
+                <ui-icon pButtonIcon name="bolt"></ui-icon>
+                <span pButtonLabel>{{ 'iam.logic.action' | translate }}</span>
+              </button>
+            </div>
+          </div>
+        }
+      </div>
+    </ng-template>
+  `,
+			styles: [":host{display:block}.node-type{display:inline-flex;align-items:center;padding:.25rem .5rem;border-radius:.25rem;font-weight:600;font-size:.75rem;text-transform:uppercase}.node-type.group{background-color:var(--f-blue-100, #dbeafe);color:var(--f-blue-700, #1e40af)}.node-type.action{background-color:var(--f-green-100, #d1fae5);color:var(--f-green-700, #065f46)}:host-context(.app-dark) .node-type.group{background-color:#3b82f633;color:var(--f-blue-400, #60a5fa)}:host-context(.app-dark) .node-type.action{background-color:#22c55e33;color:var(--f-green-400, #4ade80)}.operator-badge{display:inline-flex;align-items:center;padding:.125rem .5rem;border-radius:9999px;font-weight:600;font-size:.75rem;cursor:pointer;transition:opacity .2s}.operator-badge.and{background-color:var(--f-yellow-100, #fef3c7);color:var(--f-yellow-700, #92400e)}.operator-badge.or{background-color:var(--f-indigo-100, #e0e7ff);color:var(--f-indigo-700, #3730a3)}:host-context(.app-dark) .operator-badge.and{background-color:#eab30833;color:var(--f-yellow-400, #facc15)}:host-context(.app-dark) .operator-badge.or{background-color:#6366f133;color:var(--f-indigo-400, #818cf8)}.operator-badge:hover{opacity:.8}.action-select{background-color:var(--f-surface-0, #ffffff);color:var(--f-text-color, #1f2937)}:host-context(.app-dark) .action-select{background-color:var(--f-surface-900, #1f2937);color:var(--f-text-color, #f9fafb)}.action-select:focus{outline:none;border-color:var(--f-primary-color, #3b82f6)}\n"]
+		}]
+	}],
+	ctorParameters: () => [],
+	propDecorators: {
+		logic: [{
+			type: i0.Input,
+			args: [{
+				isSignal: true,
+				alias: "logic",
+				required: false
+			}]
+		}],
+		actions: [{
+			type: i0.Input,
+			args: [{
+				isSignal: true,
+				alias: "actions",
+				required: false
+			}]
+		}],
+		logicChange: [{
+			type: i0.Output,
+			args: ["logicChange"]
+		}]
+	}
+});
+var RolePermittedUsersDialogComponent = class RolePermittedUsersDialogComponent {
+	USER_ROLE_PERMISSIONS = USER_ROLE_PERMISSIONS;
+	permissionApi = inject(PermissionApiService);
+	userProvider = inject(USER_PROVIDER);
+	scopeResolver = inject(PermissionScopeResolverService);
+	confirmationService = inject(ConfirmationService);
+	messageService = inject(MessageService);
+	translateAdapter = inject(TranslateService, { optional: true });
+	t(key, params) {
+		return this.translateAdapter?.translate(key, params) ?? key;
+	}
+	visible = input.required(...ngDevMode ? [{ debugName: "visible" }] : /* istanbul ignore next */ []);
+	role = input.required(...ngDevMode ? [{ debugName: "role" }] : /* istanbul ignore next */ []);
+	closed = output();
+	isLoading = signal(false, ...ngDevMode ? [{ debugName: "isLoading" }] : /* istanbul ignore next */ []);
+	isRemoving = signal(false, ...ngDevMode ? [{ debugName: "isRemoving" }] : /* istanbul ignore next */ []);
+	users = signal([], ...ngDevMode ? [{ debugName: "users" }] : /* istanbul ignore next */ []);
+	showCompanyColumn = signal(false, ...ngDevMode ? [{ debugName: "showCompanyColumn" }] : /* istanbul ignore next */ []);
+	constructor() {
+		effect(() => {
+			if (this.visible() && this.role()) this.loadUsers();
+		});
+	}
+	async loadUsers() {
+		const role = this.role();
+		if (!role) return;
+		this.isLoading.set(true);
+		try {
+			const rows = (await firstValueFrom(this.permissionApi.getRoleUsers(role.id))).data ?? [];
+			const userIds = [...new Set(rows.map((r) => r.userId))];
+			const companyIds = [...new Set(rows.map((r) => r.companyId).filter((id) => !!id))];
+			const branchIds = [...new Set(rows.map((r) => r.branchId).filter((id) => !!id))];
+			const [userInfoMap, companyInfoMap, branchInfoMap] = await Promise.all([
+				this.resolveUserInfo(userIds),
+				this.scopeResolver.resolveCompanyInfo(companyIds),
+				this.scopeResolver.resolveBranchInfo(branchIds)
+			]);
+			this.showCompanyColumn.set(companyIds.length > 0);
+			this.users.set(rows.map((r) => {
+				const info = userInfoMap.get(r.userId);
+				return {
+					id: r.id,
+					userId: r.userId,
+					userName: info?.name ?? r.userId,
+					userEmail: info?.email ?? "",
+					companyId: r.companyId,
+					companyName: r.companyId ? companyInfoMap.get(r.companyId)?.name ?? r.companyId : null,
+					branchId: r.branchId,
+					branchName: r.branchId ? branchInfoMap.get(r.branchId)?.name ?? r.branchId : null
+				};
+			}));
+		} catch {} finally {
+			this.isLoading.set(false);
+		}
+	}
+	async resolveUserInfo(userIds) {
+		if (userIds.length === 0 || !this.userProvider.getUsersByIds) return /* @__PURE__ */ new Map();
+		try {
+			const response = await firstValueFrom(this.userProvider.getUsersByIds(userIds));
+			return new Map((response.data ?? []).map((u) => [u.id, u]));
+		} catch {
+			return /* @__PURE__ */ new Map();
+		}
+	}
+	onRemove(user) {
+		const role = this.role();
+		if (!role) return;
+		this.confirmationService.confirm({
+			message: this.t("iam.permission.remove.confirm", { name: user.userName }),
+			header: this.t("iam.permission.remove"),
+			icon: "exclamation-triangle",
+			acceptButtonStyleClass: "p-button-danger",
+			accept: async () => {
+				this.isRemoving.set(true);
+				try {
+					const response = await firstValueFrom(this.permissionApi.assignUserRoles({
+						userId: user.userId,
+						companyId: user.companyId ?? void 0,
+						branchId: user.branchId ?? void 0,
+						items: [{
+							id: role.id,
+							action: "remove"
+						}]
+					}));
+					if (response.success) {
+						this.users.update((list) => list.filter((u) => u.id !== user.id));
+						this.messageService.add({
+							severity: "success",
+							summary: this.t("shared.success"),
+							detail: response?.messageKey ? this.t(response.messageKey, response.messageVariables) : response?.message ?? ""
+						});
+					}
+				} catch {} finally {
+					this.isRemoving.set(false);
+				}
+			}
+		});
+	}
+	onClose() {
+		this.closed.emit();
+	}
+	static ɵfac = i0.ɵɵngDeclareFactory({
+		minVersion: "12.0.0",
+		version: "22.2.1",
+		ngImport: i0,
+		type: RolePermittedUsersDialogComponent,
+		deps: [],
+		target: i0.ɵɵFactoryTarget.Component
+	});
+	static ɵcmp = i0.ɵɵngDeclareComponent({
+		minVersion: "17.0.0",
+		version: "22.2.1",
+		type: RolePermittedUsersDialogComponent,
+		isStandalone: true,
+		selector: "flusys-role-permitted-users-dialog",
+		inputs: {
+			visible: {
+				classPropertyName: "visible",
+				publicName: "visible",
+				isSignal: true,
+				isRequired: true,
+				transformFunction: null
+			},
+			role: {
+				classPropertyName: "role",
+				publicName: "role",
+				isSignal: true,
+				isRequired: true,
+				transformFunction: null
+			}
+		},
+		outputs: { closed: "closed" },
+		ngImport: i0,
+		template: `
+    <f-dialog
+      [visible]="visible()"
+      [modal]="true"
+      [closable]="true"
+      [breakpoints]="{ '960px': '90vw', '640px': '95vw' }"
+      [style]="{ width: '50vw', maxWidth: '600px' }"
+      [header]="'iam.permission.view.users' | translate"
+      (onHide)="onClose()"
+    >
+      <div class="mb-4">
+        <p class="text-sm text-muted-color">
+          {{ 'iam.role.name' | translate }}:
+          <strong>{{ role()?.name }}</strong>
+        </p>
+      </div>
+
+      @if (isLoading()) {
+        <div class="flex justify-center items-center py-8">
+          <f-progressspinner />
+        </div>
+      } @else {
+        <div class="flex flex-col gap-3">
+          @for (user of users(); track user.id) {
+            <div
+              class="flex items-center justify-between p-3 border border-surface rounded"
+            >
+              <div>
+                <div class="font-semibold">{{ user.userName }}</div>
+                <div class="text-sm text-muted-color">{{ user.userEmail }}</div>
+                @if (showCompanyColumn() && user.companyName) {
+                  <div class="text-xs text-muted-color mt-1">
+                    {{ 'iam.company.name' | translate }}: {{ user.companyName }}
+                    @if (user.branchName) {
+                      · {{ 'iam.branch.name' | translate }}: {{ user.branchName }}
+                    } @else {
+                      · {{ 'iam.branch.all' | translate }}
+                    }
+                  </div>
+                }
+              </div>
+              <button
+                fButton
+                *hasPermission="USER_ROLE_PERMISSIONS.ASSIGN"
+                [text]="true"
+                severity="danger"
+                size="small"
+                [disabled]="isRemoving()"
+                [fTooltip]="'shared.remove' | translate"
+                (click)="onRemove(user)"
+              >
+                <ui-icon pButtonIcon name="trash"></ui-icon>
+              </button>
+            </div>
+          } @empty {
+            <div class="text-center py-4 text-muted-color">
+              {{ 'iam.permission.no.users' | translate }}
+            </div>
+          }
+        </div>
+      }
+
+      <ng-template #footer>
+        <button
+          fButton
+          severity="secondary"
+          [outlined]="true"
+          (click)="onClose()"
+        >
+          <span pButtonLabel>{{ 'shared.close' | translate }}</span>
+        </button>
+      </ng-template>
+    </f-dialog>
+  `,
+		isInline: true,
+		dependencies: [
+			{
+				kind: "component",
+				type: DialogComponent,
+				selector: "f-dialog",
+				inputs: [
+					"header",
+					"visible",
+					"modal",
+					"closable",
+					"closeOnEscape",
+					"dismissableMask",
+					"resizable",
+					"draggable",
+					"maximizable",
+					"blockScroll",
+					"returnFocusOnClose",
+					"position",
+					"style",
+					"styleClass",
+					"breakpoints"
+				],
+				outputs: [
+					"visibleChange",
+					"onShow",
+					"onHide",
+					"onMaximize"
+				]
+			},
+			{
+				kind: "directive",
+				type: FButtonDirective,
+				selector: "[fButton]",
+				inputs: [
+					"severity",
+					"text",
+					"outlined",
+					"link",
+					"variant",
+					"rounded",
+					"raised",
+					"fluid",
+					"disabled",
+					"loading",
+					"loadingIcon",
+					"size",
+					"label",
+					"icon",
+					"iconPos",
+					"ariaLabel",
+					"plain"
+				]
+			},
+			{
+				kind: "component",
+				type: ProgressSpinnerComponent,
+				selector: "f-progressspinner",
+				inputs: [
+					"size",
+					"strokeWidth",
+					"animationDuration",
+					"styleClass",
+					"ariaLabel"
+				]
+			},
+			{
+				kind: "directive",
+				type: TooltipDirective,
+				selector: "[fTooltip]",
+				inputs: [
+					"fTooltip",
+					"tooltipPosition",
+					"positionStyle",
+					"tooltipStyleClass",
+					"disabled",
+					"tooltipEvent",
+					"showDelay",
+					"hideDelay",
+					"life",
+					"autoHide",
+					"positionTop",
+					"positionLeft",
+					"escape"
+				]
+			},
+			{
+				kind: "component",
+				type: UiIconComponent,
+				selector: "ui-icon",
+				inputs: [
+					"name",
+					"size",
+					"spin",
+					"fill",
+					"severity"
+				]
+			},
+			{
+				kind: "directive",
+				type: HasPermissionDirective,
+				selector: "[hasPermission]",
+				inputs: ["hasPermission"]
+			},
+			{
+				kind: "pipe",
+				type: TranslatePipe,
+				name: "translate"
+			}
+		]
+	});
+};
+i0.ɵɵngDeclareClassMetadata({
+	minVersion: "12.0.0",
+	version: "22.2.1",
+	ngImport: i0,
+	type: RolePermittedUsersDialogComponent,
+	decorators: [{
+		type: Component,
+		args: [{
+			selector: "flusys-role-permitted-users-dialog",
+			imports: [
+				DialogComponent,
+				FButtonDirective,
+				ProgressSpinnerComponent,
+				TooltipDirective,
+				UiIconComponent,
+				HasPermissionDirective,
+				TranslatePipe
+			],
+			template: `
+    <f-dialog
+      [visible]="visible()"
+      [modal]="true"
+      [closable]="true"
+      [breakpoints]="{ '960px': '90vw', '640px': '95vw' }"
+      [style]="{ width: '50vw', maxWidth: '600px' }"
+      [header]="'iam.permission.view.users' | translate"
+      (onHide)="onClose()"
+    >
+      <div class="mb-4">
+        <p class="text-sm text-muted-color">
+          {{ 'iam.role.name' | translate }}:
+          <strong>{{ role()?.name }}</strong>
+        </p>
+      </div>
+
+      @if (isLoading()) {
+        <div class="flex justify-center items-center py-8">
+          <f-progressspinner />
+        </div>
+      } @else {
+        <div class="flex flex-col gap-3">
+          @for (user of users(); track user.id) {
+            <div
+              class="flex items-center justify-between p-3 border border-surface rounded"
+            >
+              <div>
+                <div class="font-semibold">{{ user.userName }}</div>
+                <div class="text-sm text-muted-color">{{ user.userEmail }}</div>
+                @if (showCompanyColumn() && user.companyName) {
+                  <div class="text-xs text-muted-color mt-1">
+                    {{ 'iam.company.name' | translate }}: {{ user.companyName }}
+                    @if (user.branchName) {
+                      · {{ 'iam.branch.name' | translate }}: {{ user.branchName }}
+                    } @else {
+                      · {{ 'iam.branch.all' | translate }}
+                    }
+                  </div>
+                }
+              </div>
+              <button
+                fButton
+                *hasPermission="USER_ROLE_PERMISSIONS.ASSIGN"
+                [text]="true"
+                severity="danger"
+                size="small"
+                [disabled]="isRemoving()"
+                [fTooltip]="'shared.remove' | translate"
+                (click)="onRemove(user)"
+              >
+                <ui-icon pButtonIcon name="trash"></ui-icon>
+              </button>
+            </div>
+          } @empty {
+            <div class="text-center py-4 text-muted-color">
+              {{ 'iam.permission.no.users' | translate }}
+            </div>
+          }
+        </div>
+      }
+
+      <ng-template #footer>
+        <button
+          fButton
+          severity="secondary"
+          [outlined]="true"
+          (click)="onClose()"
+        >
+          <span pButtonLabel>{{ 'shared.close' | translate }}</span>
+        </button>
+      </ng-template>
+    </f-dialog>
+  `
+		}]
+	}],
+	ctorParameters: () => [],
+	propDecorators: {
+		visible: [{
+			type: i0.Input,
+			args: [{
+				isSignal: true,
+				alias: "visible",
+				required: true
+			}]
+		}],
+		role: [{
+			type: i0.Input,
+			args: [{
+				isSignal: true,
+				alias: "role",
+				required: true
+			}]
+		}],
+		closed: [{
+			type: i0.Output,
+			args: ["closed"]
+		}]
+	}
+});
+var ActionPermittedUsersDialogComponent = class ActionPermittedUsersDialogComponent {
+	USER_ACTION_PERMISSIONS = USER_ACTION_PERMISSIONS;
+	permissionApi = inject(PermissionApiService);
+	userProvider = inject(USER_PROVIDER);
+	scopeResolver = inject(PermissionScopeResolverService);
+	confirmationService = inject(ConfirmationService);
+	messageService = inject(MessageService);
+	translateAdapter = inject(TranslateService, { optional: true });
+	t(key, params) {
+		return this.translateAdapter?.translate(key, params) ?? key;
+	}
+	visible = input.required(...ngDevMode ? [{ debugName: "visible" }] : /* istanbul ignore next */ []);
+	action = input.required(...ngDevMode ? [{ debugName: "action" }] : /* istanbul ignore next */ []);
+	closed = output();
+	isLoading = signal(false, ...ngDevMode ? [{ debugName: "isLoading" }] : /* istanbul ignore next */ []);
+	isRemoving = signal(false, ...ngDevMode ? [{ debugName: "isRemoving" }] : /* istanbul ignore next */ []);
+	users = signal([], ...ngDevMode ? [{ debugName: "users" }] : /* istanbul ignore next */ []);
+	showCompanyColumn = signal(false, ...ngDevMode ? [{ debugName: "showCompanyColumn" }] : /* istanbul ignore next */ []);
+	constructor() {
+		effect(() => {
+			if (this.visible() && this.action()) this.loadUsers();
+		});
+	}
+	async loadUsers() {
+		const action = this.action();
+		if (!action) return;
+		this.isLoading.set(true);
+		try {
+			const rows = (await firstValueFrom(this.permissionApi.getActionUsers(action.id))).data ?? [];
+			const userIds = [...new Set(rows.map((r) => r.userId))];
+			const companyIds = [...new Set(rows.map((r) => r.companyId).filter((id) => !!id))];
+			const branchIds = [...new Set(rows.map((r) => r.branchId).filter((id) => !!id))];
+			const [userInfoMap, companyInfoMap, branchInfoMap] = await Promise.all([
+				this.resolveUserInfo(userIds),
+				this.scopeResolver.resolveCompanyInfo(companyIds),
+				this.scopeResolver.resolveBranchInfo(branchIds)
+			]);
+			this.showCompanyColumn.set(companyIds.length > 0);
+			this.users.set(rows.map((r) => {
+				const info = userInfoMap.get(r.userId);
+				return {
+					id: r.id,
+					userId: r.userId,
+					userName: info?.name ?? r.userId,
+					userEmail: info?.email ?? "",
+					companyId: r.companyId,
+					companyName: r.companyId ? companyInfoMap.get(r.companyId)?.name ?? r.companyId : null,
+					branchId: r.branchId,
+					branchName: r.branchId ? branchInfoMap.get(r.branchId)?.name ?? r.branchId : null
+				};
+			}));
+		} catch {} finally {
+			this.isLoading.set(false);
+		}
+	}
+	async resolveUserInfo(userIds) {
+		if (userIds.length === 0 || !this.userProvider.getUsersByIds) return /* @__PURE__ */ new Map();
+		try {
+			const response = await firstValueFrom(this.userProvider.getUsersByIds(userIds));
+			return new Map((response.data ?? []).map((u) => [u.id, u]));
+		} catch {
+			return /* @__PURE__ */ new Map();
+		}
+	}
+	onRemove(user) {
+		const action = this.action();
+		if (!action) return;
+		this.confirmationService.confirm({
+			message: this.t("iam.permission.remove.confirm", { name: user.userName }),
+			header: this.t("iam.permission.remove"),
+			icon: "exclamation-triangle",
+			acceptButtonStyleClass: "p-button-danger",
+			accept: async () => {
+				this.isRemoving.set(true);
+				try {
+					const response = await firstValueFrom(this.permissionApi.assignUserActions({
+						userId: user.userId,
+						companyId: user.companyId ?? void 0,
+						branchId: user.branchId ?? void 0,
+						items: [{
+							id: action.id,
+							action: "remove"
+						}]
+					}));
+					if (response.success) {
+						this.users.update((list) => list.filter((u) => u.id !== user.id));
+						this.messageService.add({
+							severity: "success",
+							summary: this.t("shared.success"),
+							detail: response?.messageKey ? this.t(response.messageKey, response.messageVariables) : response?.message ?? ""
+						});
+					}
+				} catch {} finally {
+					this.isRemoving.set(false);
+				}
+			}
+		});
+	}
+	onClose() {
+		this.closed.emit();
+	}
+	static ɵfac = i0.ɵɵngDeclareFactory({
+		minVersion: "12.0.0",
+		version: "22.2.1",
+		ngImport: i0,
+		type: ActionPermittedUsersDialogComponent,
+		deps: [],
+		target: i0.ɵɵFactoryTarget.Component
+	});
+	static ɵcmp = i0.ɵɵngDeclareComponent({
+		minVersion: "17.0.0",
+		version: "22.2.1",
+		type: ActionPermittedUsersDialogComponent,
+		isStandalone: true,
+		selector: "flusys-action-permitted-users-dialog",
+		inputs: {
+			visible: {
+				classPropertyName: "visible",
+				publicName: "visible",
+				isSignal: true,
+				isRequired: true,
+				transformFunction: null
+			},
+			action: {
+				classPropertyName: "action",
+				publicName: "action",
+				isSignal: true,
+				isRequired: true,
+				transformFunction: null
+			}
+		},
+		outputs: { closed: "closed" },
+		ngImport: i0,
+		template: `
+    <f-dialog
+      [visible]="visible()"
+      [modal]="true"
+      [closable]="true"
+      [breakpoints]="{ '960px': '90vw', '640px': '95vw' }"
+      [style]="{ width: '50vw', maxWidth: '600px' }"
+      [header]="'iam.permission.view.users' | translate"
+      (onHide)="onClose()"
+    >
+      <div class="mb-4">
+        <p class="text-sm text-muted-color">
+          {{ 'iam.action.name' | translate }}:
+          <strong>{{ action()?.name }}</strong>
+        </p>
+      </div>
+
+      @if (isLoading()) {
+        <div class="flex justify-center items-center py-8">
+          <f-progressspinner />
+        </div>
+      } @else {
+        <div class="flex flex-col gap-3">
+          @for (user of users(); track user.id) {
+            <div
+              class="flex items-center justify-between p-3 border border-surface rounded"
+            >
+              <div>
+                <div class="font-semibold">{{ user.userName }}</div>
+                <div class="text-sm text-muted-color">{{ user.userEmail }}</div>
+                @if (showCompanyColumn() && user.companyName) {
+                  <div class="text-xs text-muted-color mt-1">
+                    {{ 'iam.company.name' | translate }}: {{ user.companyName }}
+                    @if (user.branchName) {
+                      · {{ 'iam.branch.name' | translate }}: {{ user.branchName }}
+                    } @else {
+                      · {{ 'iam.branch.all' | translate }}
+                    }
+                  </div>
+                }
+              </div>
+              <button
+                fButton
+                *hasPermission="USER_ACTION_PERMISSIONS.ASSIGN"
+                [text]="true"
+                severity="danger"
+                size="small"
+                [disabled]="isRemoving()"
+                [fTooltip]="'shared.remove' | translate"
+                (click)="onRemove(user)"
+              >
+                <ui-icon pButtonIcon name="trash"></ui-icon>
+              </button>
+            </div>
+          } @empty {
+            <div class="text-center py-4 text-muted-color">
+              {{ 'iam.permission.no.users' | translate }}
+            </div>
+          }
+        </div>
+      }
+
+      <ng-template #footer>
+        <button
+          fButton
+          severity="secondary"
+          [outlined]="true"
+          (click)="onClose()"
+        >
+          <span pButtonLabel>{{ 'shared.close' | translate }}</span>
+        </button>
+      </ng-template>
+    </f-dialog>
+  `,
+		isInline: true,
+		dependencies: [
+			{
+				kind: "component",
+				type: DialogComponent,
+				selector: "f-dialog",
+				inputs: [
+					"header",
+					"visible",
+					"modal",
+					"closable",
+					"closeOnEscape",
+					"dismissableMask",
+					"resizable",
+					"draggable",
+					"maximizable",
+					"blockScroll",
+					"returnFocusOnClose",
+					"position",
+					"style",
+					"styleClass",
+					"breakpoints"
+				],
+				outputs: [
+					"visibleChange",
+					"onShow",
+					"onHide",
+					"onMaximize"
+				]
+			},
+			{
+				kind: "directive",
+				type: FButtonDirective,
+				selector: "[fButton]",
+				inputs: [
+					"severity",
+					"text",
+					"outlined",
+					"link",
+					"variant",
+					"rounded",
+					"raised",
+					"fluid",
+					"disabled",
+					"loading",
+					"loadingIcon",
+					"size",
+					"label",
+					"icon",
+					"iconPos",
+					"ariaLabel",
+					"plain"
+				]
+			},
+			{
+				kind: "component",
+				type: ProgressSpinnerComponent,
+				selector: "f-progressspinner",
+				inputs: [
+					"size",
+					"strokeWidth",
+					"animationDuration",
+					"styleClass",
+					"ariaLabel"
+				]
+			},
+			{
+				kind: "directive",
+				type: TooltipDirective,
+				selector: "[fTooltip]",
+				inputs: [
+					"fTooltip",
+					"tooltipPosition",
+					"positionStyle",
+					"tooltipStyleClass",
+					"disabled",
+					"tooltipEvent",
+					"showDelay",
+					"hideDelay",
+					"life",
+					"autoHide",
+					"positionTop",
+					"positionLeft",
+					"escape"
+				]
+			},
+			{
+				kind: "component",
+				type: UiIconComponent,
+				selector: "ui-icon",
+				inputs: [
+					"name",
+					"size",
+					"spin",
+					"fill",
+					"severity"
+				]
+			},
+			{
+				kind: "directive",
+				type: HasPermissionDirective,
+				selector: "[hasPermission]",
+				inputs: ["hasPermission"]
+			},
+			{
+				kind: "pipe",
+				type: TranslatePipe,
+				name: "translate"
+			}
+		]
+	});
+};
+i0.ɵɵngDeclareClassMetadata({
+	minVersion: "12.0.0",
+	version: "22.2.1",
+	ngImport: i0,
+	type: ActionPermittedUsersDialogComponent,
+	decorators: [{
+		type: Component,
+		args: [{
+			selector: "flusys-action-permitted-users-dialog",
+			imports: [
+				DialogComponent,
+				FButtonDirective,
+				ProgressSpinnerComponent,
+				TooltipDirective,
+				UiIconComponent,
+				HasPermissionDirective,
+				TranslatePipe
+			],
+			template: `
+    <f-dialog
+      [visible]="visible()"
+      [modal]="true"
+      [closable]="true"
+      [breakpoints]="{ '960px': '90vw', '640px': '95vw' }"
+      [style]="{ width: '50vw', maxWidth: '600px' }"
+      [header]="'iam.permission.view.users' | translate"
+      (onHide)="onClose()"
+    >
+      <div class="mb-4">
+        <p class="text-sm text-muted-color">
+          {{ 'iam.action.name' | translate }}:
+          <strong>{{ action()?.name }}</strong>
+        </p>
+      </div>
+
+      @if (isLoading()) {
+        <div class="flex justify-center items-center py-8">
+          <f-progressspinner />
+        </div>
+      } @else {
+        <div class="flex flex-col gap-3">
+          @for (user of users(); track user.id) {
+            <div
+              class="flex items-center justify-between p-3 border border-surface rounded"
+            >
+              <div>
+                <div class="font-semibold">{{ user.userName }}</div>
+                <div class="text-sm text-muted-color">{{ user.userEmail }}</div>
+                @if (showCompanyColumn() && user.companyName) {
+                  <div class="text-xs text-muted-color mt-1">
+                    {{ 'iam.company.name' | translate }}: {{ user.companyName }}
+                    @if (user.branchName) {
+                      · {{ 'iam.branch.name' | translate }}: {{ user.branchName }}
+                    } @else {
+                      · {{ 'iam.branch.all' | translate }}
+                    }
+                  </div>
+                }
+              </div>
+              <button
+                fButton
+                *hasPermission="USER_ACTION_PERMISSIONS.ASSIGN"
+                [text]="true"
+                severity="danger"
+                size="small"
+                [disabled]="isRemoving()"
+                [fTooltip]="'shared.remove' | translate"
+                (click)="onRemove(user)"
+              >
+                <ui-icon pButtonIcon name="trash"></ui-icon>
+              </button>
+            </div>
+          } @empty {
+            <div class="text-center py-4 text-muted-color">
+              {{ 'iam.permission.no.users' | translate }}
+            </div>
+          }
+        </div>
+      }
+
+      <ng-template #footer>
+        <button
+          fButton
+          severity="secondary"
+          [outlined]="true"
+          (click)="onClose()"
+        >
+          <span pButtonLabel>{{ 'shared.close' | translate }}</span>
+        </button>
+      </ng-template>
+    </f-dialog>
+  `
+		}]
+	}],
+	ctorParameters: () => [],
+	propDecorators: {
+		visible: [{
+			type: i0.Input,
+			args: [{
+				isSignal: true,
+				alias: "visible",
+				required: true
+			}]
+		}],
+		action: [{
+			type: i0.Input,
+			args: [{
+				isSignal: true,
+				alias: "action",
+				required: true
+			}]
+		}],
+		closed: [{
+			type: i0.Output,
+			args: ["closed"]
+		}]
+	}
+});
+function flatten(nodes) {
+	return nodes.flatMap(({ children, ...action }) => [action, ...flatten(children ?? [])]);
+}
+var ActionProviderAdapter = class ActionProviderAdapter {
+	actionApi = inject(ActionApiService);
+	appConfig = inject(APP_CONFIG);
+	isAvailable() {
+		return isServiceEnabled(this.appConfig, "iam");
+	}
+	getActions(scope = "company") {
+		return (scope === "all" ? this.actionApi.getTree(void 0, true).pipe(map((response) => ({
+			...response,
+			data: flatten(response.data ?? [])
+		}))) : this.actionApi.getActionsForPermission()).pipe(map((response) => ({
+			success: response.success,
+			message: response.message,
+			data: (response.data ?? []).filter((action) => action.isActive).map((action) => ({
+				id: action.id,
+				name: action.name,
+				code: action.code,
+				description: action.description,
+				parentId: action.parentId,
+				serial: action.serial
+			}))
+		})));
+	}
+	static ɵfac = i0.ɵɵngDeclareFactory({
+		minVersion: "12.0.0",
+		version: "22.2.1",
+		ngImport: i0,
+		type: ActionProviderAdapter,
+		deps: [],
+		target: i0.ɵɵFactoryTarget.Service
+	});
+	static ɵprov = i0.ɵɵngDeclareService({
+		minVersion: "22.0.0",
+		version: "22.2.1",
+		ngImport: i0,
+		type: ActionProviderAdapter,
+		autoProvided: false
+	});
+};
+i0.ɵɵngDeclareClassMetadata({
+	minVersion: "12.0.0",
+	version: "22.2.1",
+	ngImport: i0,
+	type: ActionProviderAdapter,
+	decorators: [{
+		type: Service,
+		args: [{ autoProvided: false }]
+	}]
+});
+var ProfilePermissionProviderAdapter = class ProfilePermissionProviderAdapter {
+	permissionApi = inject(PermissionApiService);
+	getUserRoles() {
+		return this.permissionApi.getMyRoles().pipe(map((response) => ({
+			success: response.success,
+			message: response.message,
+			data: (response.data ?? []).map((role) => ({
+				id: role.roleId,
+				name: role.roleName,
+				description: null
+			}))
+		})));
+	}
+	getUserActions() {
+		return this.permissionApi.getMyActions().pipe(map((response) => ({
+			success: response.success,
+			message: response.message,
+			data: (response.data ?? []).map((action) => ({
+				id: action.actionId,
+				name: action.actionName,
+				code: action.actionCode,
+				description: null
+			}))
+		})));
+	}
+	static ɵfac = i0.ɵɵngDeclareFactory({
+		minVersion: "12.0.0",
+		version: "22.2.1",
+		ngImport: i0,
+		type: ProfilePermissionProviderAdapter,
+		deps: [],
+		target: i0.ɵɵFactoryTarget.Service
+	});
+	static ɵprov = i0.ɵɵngDeclareService({
+		minVersion: "22.0.0",
+		version: "22.2.1",
+		ngImport: i0,
+		type: ProfilePermissionProviderAdapter,
+		autoProvided: false
+	});
+};
+i0.ɵɵngDeclareClassMetadata({
+	minVersion: "12.0.0",
+	version: "22.2.1",
+	ngImport: i0,
+	type: ProfilePermissionProviderAdapter,
+	decorators: [{
+		type: Service,
+		args: [{ autoProvided: false }]
+	}]
+});
+function provideIamProviders() {
+	return [{
+		provide: PROFILE_PERMISSION_PROVIDER,
+		useClass: ProfilePermissionProviderAdapter
+	}, {
+		provide: ACTION_PROVIDER,
+		useClass: ActionProviderAdapter
+	}];
+}
+function resolveIamDefaultTab() {
+	const permissionValidator = inject(PermissionValidatorService);
+	const permissionMode = getPermissionMode(inject(APP_CONFIG));
+	if (permissionValidator.hasPermission(ACTION_PERMISSIONS.READ)) return "actions";
+	if (permissionValidator.hasPermission(ROLE_PERMISSIONS.READ) && (permissionMode === "rbac" || permissionMode === "full")) return "roles";
+	if (permissionValidator.hasAnyPermission([
+		ROLE_ACTION_PERMISSIONS.READ,
+		USER_ROLE_PERMISSIONS.READ,
+		USER_ACTION_PERMISSIONS.READ,
+		COMPANY_ACTION_PERMISSIONS.READ
+	])) return "permissions";
+	return "actions";
+}
+const IAM_ROUTES = [{
+	path: "",
+	resolve: { translations: resolveTranslationModule({
+		modules: ["iam"],
+		fallbackMessages: {
+			...IAM_MESSAGES,
+			...SHARED_MESSAGES
+		}
+	}) },
+	loadComponent: () => import("./flusys-ng-iam-iam-container.component-CIdxVCSW.mjs").then((m) => m.IamContainerComponent),
+	children: [
+		{
+			path: "actions",
+			canActivate: [permissionGuard(ACTION_PERMISSIONS.READ)],
+			children: [
+				{
+					path: "",
+					loadComponent: () => import("./flusys-ng-iam-action-list-page.component-Br0PbgRa.mjs").then((m) => m.ActionListPageComponent)
+				},
+				{
+					path: "new",
+					loadComponent: () => import("./flusys-ng-iam-action-form-page.component-DJ-A1gc2.mjs").then((m) => m.ActionFormPageComponent)
+				},
+				{
+					path: ":id",
+					loadComponent: () => import("./flusys-ng-iam-action-form-page.component-DJ-A1gc2.mjs").then((m) => m.ActionFormPageComponent)
+				}
+			]
+		},
+		{
+			path: "roles",
+			canActivate: [permissionGuard(ROLE_PERMISSIONS.READ)],
+			children: [
+				{
+					path: "",
+					loadComponent: () => import("./flusys-ng-iam-role-list-page.component-BCO_gQ8k.mjs").then((m) => m.RoleListPageComponent)
+				},
+				{
+					path: "new",
+					loadComponent: () => import("./flusys-ng-iam-role-form-page.component-DnkWkbTF.mjs").then((m) => m.RoleFormPageComponent)
+				},
+				{
+					path: ":id",
+					loadComponent: () => import("./flusys-ng-iam-role-form-page.component-DnkWkbTF.mjs").then((m) => m.RoleFormPageComponent)
+				}
+			]
+		},
+		{
+			path: "permissions",
+			canActivate: [anyPermissionGuard([
+				ROLE_ACTION_PERMISSIONS.READ,
+				USER_ROLE_PERMISSIONS.READ,
+				USER_ACTION_PERMISSIONS.READ,
+				COMPANY_ACTION_PERMISSIONS.READ
+			])],
+			loadComponent: () => import("./flusys-ng-iam-permission-page.component-BlNt83uR.mjs").then((m) => m.PermissionPageComponent)
+		},
+		{
+			path: "",
+			redirectTo: () => resolveIamDefaultTab(),
+			pathMatch: "full"
+		}
+	]
+}];
+export { ActionApiService, ActionPermissionLogicService, ActionPermittedUsersDialogComponent, ActionProviderAdapter, ActionType, CompanyActionSelectorComponent, IAM_MESSAGES, IAM_ROUTES, LogicBuilderComponent, MAX_DROPDOWN_ITEMS, MyPermissionsApiService, PermissionApiService, PermissionScopeResolverService, PermissionStateService, ProfilePermissionProviderAdapter, RoleActionSelectorComponent, RoleApiService, RolePermittedUsersDialogComponent, UserActionSelectorComponent, UserRoleSelectorComponent, provideIamProviders };
+
+//# sourceMappingURL=flusys-ng-iam.mjs.map