-- RBAC modules for company SMTP, sending limits, email campaigns

INSERT IGNORE INTO permission_modules (module_key, label, module_group, sort_order) VALUES
  ('company_smtp', 'Company SMTP Accounts', 'Email', 92),
  ('sending_limits', 'Sending Rate Limits', 'Email', 93),
  ('email_campaigns', 'Email Campaigns', 'Email', 94);

-- Super Admin (role_id = 1): full access including view
INSERT IGNORE INTO role_permissions (role_id, module_key, action_key, allowed)
SELECT 1, 'company_smtp', pa.action_key, 1
FROM permission_actions pa
WHERE pa.action_key IN ('read', 'create', 'update', 'delete', 'export', 'view');

INSERT IGNORE INTO role_permissions (role_id, module_key, action_key, allowed)
SELECT 1, 'sending_limits', pa.action_key, 1
FROM permission_actions pa
WHERE pa.action_key IN ('read', 'update');

INSERT IGNORE INTO role_permissions (role_id, module_key, action_key, allowed)
SELECT 1, 'email_campaigns', pa.action_key, 1
FROM permission_actions pa
WHERE pa.action_key IN ('read', 'create', 'update', 'delete', 'view');