[DOCS] 更新 RBAC 實作規範與角色初始化流程建議

app/Http/Controllers/Admin/CompanyController.php

@@ -32,7 +32,12 @@ class CompanyController extends Controller
         $per_page = $request->input('per_page', 10);
         $companies = $query->latest()->paginate($per_page)->withQueryString();
 
-        return view('admin.companies.index', compact('companies'));
+        // 取得可供選擇的客戶角色範本 (is_system = 0, company_id = null)
+        $template_roles = \App\Models\System\Role::where('is_system', 0)
+            ->whereNull('company_id')
+            ->get();
+
+        return view('admin.companies.index', compact('companies', 'template_roles'));
     }
 
     /**
@@ -54,6 +59,7 @@ class CompanyController extends Controller
             'admin_username' => 'nullable|string|max:255|unique:users,username',
             'admin_password' => 'nullable|string|min:8',
             'admin_name' => 'nullable|string|max:255',
+            'admin_role' => 'nullable|string|exists:roles,name',
         ]);
 
         DB::transaction(function () use ($validated) {
@@ -79,8 +85,30 @@ class CompanyController extends Controller
                     'status' => 1,
                 ]);
 
-                // 綁定客戶管理員角色
-                $user->assignRole('tenant-admin');
+                // 角色初始化與克隆邏輯 (優先使用選擇的角色，否則使用預設)
+                $selected_role_name = $validated['admin_role'] ?? '通用客戶角色範本';
+                $role_to_assign = '管理員';
+
+                $template_role = \App\Models\System\Role::where('name', $selected_role_name)
+                    ->whereNull('company_id')
+                    ->where('is_system', 0)
+                    ->first();
+
+                if ($template_role) {
+                    // 克隆範本為該公司的「管理員」
+                    $clonedRole = \App\Models\System\Role::query()->create([
+                        'name' => '管理員',
+                        'guard_name' => 'web',
+                        'company_id' => $company->id,
+                        'is_system' => false,
+                    ]);
+                    $clonedRole->syncPermissions($template_role->permissions);
+                } else {
+                    // 如果找不到選定的角色範本，退而求其次嘗試指派現有角色 (通常不應發生)
+                    $role_to_assign = $selected_role_name;
+                }
+
+                $user->assignRole($role_to_assign);
             }
         });