const db = require("../models"); const { clearPermissionCache } = require("../utils/cache.util"); const { logActivity } = require("../services/activity.service"); exports.assignRole = async (req, res, next) => { try { const [assignment] = await db.UserRole.findOrCreate({ where: { user_id: req.params.userId, role_id: req.params.roleId } }); await clearPermissionCache(req.params.userId); await logActivity({ user: req.user, description: `Role ${req.params.roleId} assigned to user ${req.params.userId}`, type: "ROLE_ASSIGNED", module: "Authorization" }); res.status(201).json({ success: true, data: { id: assignment.id, userId: assignment.user_id, roleId: assignment.role_id } }); } catch (error) { next(error); } }; exports.removeRole = async (req, res, next) => { try { await db.UserRole.destroy({ where: { user_id: req.params.userId, role_id: req.params.roleId } }); await clearPermissionCache(req.params.userId); await logActivity({ user: req.user, description: `Role ${req.params.roleId} removed from user ${req.params.userId}`, type: "ROLE_REMOVED", module: "Authorization" }); res.json({ success: true, message: "Role removed" }); } catch (error) { next(error); } };