feat(role): role bind

scripts/db/migrations/0005_refresh_token_fingerprint.sql

@@ -0,0 +1,11 @@
+BEGIN;
+
+ALTER TABLE refresh_tokens
+    ADD COLUMN IF NOT EXISTS token_fingerprint VARCHAR(64);
+
+CREATE UNIQUE INDEX IF NOT EXISTS idx_refresh_tokens_token_fingerprint
+    ON refresh_tokens(token_fingerprint)
+    WHERE token_fingerprint IS NOT NULL;
+
+COMMIT;
+

scripts/db/migrations/0006_cms_permissions.sql

@@ -0,0 +1,13 @@
+BEGIN;
+
+INSERT INTO permissions (code, description, resource, action) VALUES
+('cms:article:create', 'Create article', 'article', 'create'),
+('cms:article:edit', 'Edit article', 'article', 'edit'),
+('cms:article:publish', 'Publish article', 'article', 'publish'),
+('cms:category:manage', 'Manage categories', 'category', 'manage'),
+('cms:media:manage', 'Manage media library', 'media', 'manage'),
+('cms:settings:manage', 'Manage system settings', 'settings', 'manage')
+ON CONFLICT (code) DO NOTHING;
+
+COMMIT;
+