<?php
require_once __DIR__.'/../includes/functions.php';
require_once __DIR__.'/../includes/v292_admin_portal_helpers.php';
$admin=require_super_admin(); mj292_ensure_schema();
$adminTitle='Role Permission Management'; $adminSubtitle='Suggested clean admin roles. Existing super admin remains full access.';
$roles=['super_admin'=>'Everything','finance_admin'=>'Payments, invoices, wallet, receipts, finance reports','listing_admin'=>'Listings, companies, categories, moderation','support_admin'=>'Users, support tickets, notes, read invoices','content_admin'=>'Pages, SEO, banners, sitemap','readonly_admin'=>'View only'];
include __DIR__.'/_header.php';
?>
<div class="card mj-v292-card"><div class="card-header"><h3 class="card-title">Admin Roles</h3></div><div class="card-body"><div class="row"><?php foreach($roles as $r=>$desc): ?><div class="col-md-4 mb-3"><div class="border rounded p-3 h-100"><h5><?=e(ucwords(str_replace('_',' ',$r)))?></h5><p class="text-muted mb-0"><?=e($desc)?></p></div></div><?php endforeach; ?></div><p class="text-muted mb-0">Role table is ready for permissions. Current project pages still use existing admin login and super admin checks for sensitive reset actions.</p></div></div>
<?php include __DIR__.'/_footer.php'; ?>
