--liquibase formatted sql
-- PANELS · iam · permisos gastos, almacén y control de costos

--changeset panel:iam-003a-permissions endDelimiter:; splitStatements:true
INSERT INTO iam.permissions (code, label) VALUES
  ('view_expenses', 'Ver gastos y reportes de costos'),
  ('manage_expenses', 'Capturar y editar gastos'),
  ('view_warehouse', 'Ver almacén global y de obra'),
  ('manage_warehouse', 'Entradas, salidas y transferencias de almacén'),
  ('close_warehouse', 'Cerrar almacén de obra'),
  ('manage_cost_settings', 'Configurar umbrales de alerta presupuestal')
ON CONFLICT (code) DO NOTHING;

--changeset panel:iam-003b-tenant-admin-permissions endDelimiter:; splitStatements:true
INSERT INTO iam.role_permissions (role_code, permission_code)
SELECT 'tenant_admin', code FROM iam.permissions
WHERE code IN (
  'view_expenses', 'manage_expenses', 'view_warehouse', 'manage_warehouse',
  'close_warehouse', 'manage_cost_settings'
)
ON CONFLICT DO NOTHING;

--changeset panel:iam-003c-user-view-permissions endDelimiter:; splitStatements:true
INSERT INTO iam.role_permissions (role_code, permission_code) VALUES
  ('user', 'view_expenses'),
  ('user', 'view_warehouse')
ON CONFLICT DO NOTHING;