first commit

backend/src/routes/user.routes.ts

@@ -0,0 +1,24 @@
+import { Router } from 'express';
+import * as userController from '../controllers/user.controller.js';
+import { authenticate, requirePermission } from '../middleware/auth.js';
+
+const router = Router();
+
+// Users (Admin only)
+router.get('/', authenticate, requirePermission('users:read'), userController.getUsers);
+router.post('/', authenticate, requirePermission('users:create'), userController.createUser);
+router.get('/:id', authenticate, requirePermission('users:read'), userController.getUser);
+router.put('/:id', authenticate, requirePermission('users:update'), userController.updateUser);
+router.delete('/:id', authenticate, requirePermission('users:delete'), userController.deleteUser);
+
+// Roles
+router.get('/roles/list', authenticate, requirePermission('users:read'), userController.getRoles);
+router.post('/roles', authenticate, requirePermission('users:create'), userController.createRole);
+router.get('/roles/:id', authenticate, requirePermission('users:read'), userController.getRole);
+router.put('/roles/:id', authenticate, requirePermission('users:update'), userController.updateRole);
+router.delete('/roles/:id', authenticate, requirePermission('users:delete'), userController.deleteRole);
+
+// Permissions
+router.get('/permissions/list', authenticate, requirePermission('users:read'), userController.getPermissions);
+
+export default router;