Add role control

APP/src/app/shared/services/auth.service.ts

@@ -3,6 +3,7 @@ import { HttpClient } from '@angular/common/http';
 import { BehaviorSubject, Observable, of } from 'rxjs';
 import { catchError, filter, finalize, map, shareReplay, take, tap } from 'rxjs/operators';
 import { ApiConfigService } from '../../core/services/api-config.service';
+import { ModuleActions } from '../../core/models/permission.model';
 
 // ── Public interfaces ─────────────────────────────────────────────────────────
 
@@ -12,6 +13,11 @@ export interface UserInfo {
     email: string;
     roles: string[];
     languagePreference: string;
+    /**
+     * Effective permissions, keyed by camelCased module name (server uses a
+     * camelCase dictionary-key policy). Absent for legacy/secret-link tokens.
+     */
+    permissions?: Record<string, ModuleActions>;
 }
 
 /** Matches the C# LoginResponse DTO exactly. */