namespace ZB.MOM.WW.MxGateway.Server.Dashboard;

/// <summary>
/// Role names assigned to authenticated dashboard users. The role is derived
/// from the user's LDAP groups via <c>MxGateway:Dashboard:GroupToRole</c>.
/// </summary>
public static class DashboardRoles
{
    /// <summary>
    /// Read-write access: API-key CRUD, settings, any state-changing UI.
    /// Canonical role value (Task 1.7); formerly <c>"Admin"</c> — pure value
    /// rename, the operations this role authorizes are unchanged.
    /// </summary>
    public const string Admin = "Administrator";

    /// <summary>
    /// Read-only access: all pages render but write affordances are hidden.
    /// </summary>
    public const string Viewer = "Viewer";
}