upgrede: add asign role and manege roles and permissions

proto/sso/rbac.proto

@@ -7,6 +7,13 @@ option go_package = "git.lendry.ru/lendry-erp/proto.git/go;pb";
 
 
 service RbacService {
+  rpc CreateRole(CreateRoleRequest) returns (ModifyRoleResponse);
+  rpc UpdateRole(UpdateRoleRequest) returns (ModifyRoleResponse);
+  rpc DeleteRole(DeleteRoleRequest) returns (DeleteRoleResponse);
+  
+  rpc CreatePermission(CreatePermissionRequest) returns (ModifyPermissionResponse);
+  rpc UpdatePermission(UpdatePermissionRequest) returns (ModifyPermissionResponse);
+
   rpc GetAllPermissions (GetAllPermissionsRequest) returns (GetAllPermissionsResponse);
   rpc GetAllRoles(GetAllRolesRequest) returns (GetAllRolesResponse);
 }
@@ -37,6 +44,50 @@ message GetAllRolesResponse {
     repeated Roles roles = 1;
 }
 
+message CreateRoleRequest {
+    string name = 1;
+    int32 level = 2;
+    repeated string permission_codes = 3;
+}
+
+message UpdateRoleRequest {
+    string id = 1;
+    optional string name = 2;
+    optional int32 level = 3;
+    repeated string permission_codes = 4;
+}
+
+message ModifyRoleResponse {
+    bool success = 1;
+    string message = 2;
+}
+
+message DeleteRoleRequest {
+    string id = 1;
+}
+
+message DeleteRoleResponse {
+    bool success = 1;
+    string message = 2;
+    optional string fallback_role_name = 3;
+}
+
+message CreatePermissionRequest {
+    string code = 1;
+    string description = 2;
+    string module = 3;
+}
+
+message UpdatePermissionRequest {
+    string id = 1;
+    repeated string role_ids = 2; // Привязка к конкретным ролям
+}
+
+message ModifyPermissionResponse {
+    bool success = 1;
+    string message = 2;
+}
+
 message Roles {
     string id = 1;
     string name = 2;