-- =====================================================================
-- MIGRATION 017 (Bloco 13) — Garante a permissão settings.manage e a liga
-- ao papel admin (para proteger a área Administração). Idempotente.
-- =====================================================================
SET NAMES utf8mb4;

INSERT INTO permissions (slug, name, module)
SELECT 'settings.manage', 'Gerenciar configurações', 'admin'
WHERE NOT EXISTS (SELECT 1 FROM permissions WHERE slug='settings.manage');

INSERT INTO role_permissions (role_id, permission_id)
SELECT r.id, p.id FROM roles r CROSS JOIN permissions p
WHERE r.slug='admin' AND p.slug='settings.manage'
  AND NOT EXISTS (SELECT 1 FROM role_permissions rp WHERE rp.role_id=r.id AND rp.permission_id=p.id);