Merge origin/dev into dev

adminfront/src/locales/en.toml

@@ -972,6 +972,7 @@ org_chart = "Org Chart"
 api_keys = "API Keys"
 audit_logs = "Audit Logs"
 auth_guard = "Auth Guard"
+permissions_direct = "Direct Permissions"
 data_integrity = "Data Integrity"
 logout = "Logout"
 overview = "Overview"
@@ -996,10 +997,6 @@ title = "Redis identity cache"
 [ui.admin.ory_ssot.forbidden]
 title = "Access denied"
 
-[ui.admin.ory_ssot.projection_card]
-description = "PostgreSQL read model status used by admin search and statistics."
-title = "Backend user read model"
-
 [ui.admin.ory_ssot.status]
 failed = "failed"
 not_ready = "not ready"
@@ -1008,11 +1005,8 @@ ready = "ready"
 [ui.admin.ory_ssot.summary]
 cache_keys = "Cache keys"
 last_refreshed = "Last refreshed"
-last_synced = "Last read-model refresh"
-local_users = "Local users"
 observed_identities = "Observed identities"
 status = "Status"
-updated_at = "Updated at"
 
 [ui.admin.auth_guard]
 subtitle = "Verify admin privileges and ReBAC relationships against the policy engine."
@@ -1184,6 +1178,7 @@ tab_organization = "Organization Manage"
 tab_permissions = "Permissions"
 tab_profile = "Profile"
 tab_schema = "Tab Schema"
+tab_relations = "Fine-grained Permissions"
 title = "Details"
 
 [ui.admin.tenants.list]
@@ -1494,7 +1489,6 @@ email = "Email"
 name = "Name"
 role = "Role"
 
-
 [ui.common.role]
 admin = "Admin"
 rp_admin = "RP Admin"
@@ -2006,3 +2000,24 @@ verify = "Verify"
 
 [ui.userfront.signup.success]
 action = "Action"
+
+[ui.admin.permissions_direct]
+tab_tenant = "Tenant Features"
+tab_system = "Admin Control"
+tab_system_title = "Global Sidebar Access Control"
+select_tenant = "Select target tenant"
+select_tenant_desc = "Select target tenant to assign fine-grained permissions."
+placeholder = "-- Select Tenant --"
+add_system_user = "Add User to Admin Control"
+dialog_title_system = "Add User to Global Permissions"
+
+[msg.admin.permissions_direct]
+description = "Directly assign and manage tab-level direct permissions and global sidebar menu access."
+tab_system_desc = "Directly grant users access to each sidebar menu page. Super admins always bypass and pass all access checks."
+system_empty = "No users with custom global menu permissions found. Add users to start managing."
+select_prompt = "Select a tenant from the dropdown above to manage its fine-grained features."
+
+[msg.admin.system.relations]
+add_success = "Global menu permission added successfully."
+remove_success = "Global menu permission revoked successfully."
+remove_all_confirm = "Are you sure you want to revoke all global menu permissions for this user?"

adminfront/src/locales/ko.toml

@@ -976,6 +976,7 @@ org_chart = "조직도"
 api_keys = "API 키"
 audit_logs = "감사 로그"
 auth_guard = "인증 가드"
+permissions_direct = "권한 부여"
 data_integrity = "데이터 정합성"
 logout = "로그아웃"
 overview = "개요"
@@ -1000,10 +1001,6 @@ title = "Redis identity cache"
 [ui.admin.ory_ssot.forbidden]
 title = "접근 권한이 없습니다"
 
-[ui.admin.ory_ssot.projection_card]
-description = "관리자 검색과 통계에서 사용하는 PostgreSQL read model 상태입니다."
-title = "Backend 사용자 read model"
-
 [ui.admin.ory_ssot.status]
 failed = "실패"
 not_ready = "준비되지 않음"
@@ -1012,11 +1009,8 @@ ready = "준비됨"
 [ui.admin.ory_ssot.summary]
 cache_keys = "Cache keys"
 last_refreshed = "마지막 refresh"
-last_synced = "마지막 read-model refresh"
-local_users = "Local users"
 observed_identities = "관측 identity"
 status = "상태"
-updated_at = "상태 갱신"
 
 [ui.admin.auth_guard]
 subtitle = "관리자 권한과 ReBAC 관계를 실제 정책 엔진 기준으로 확인합니다."
@@ -1188,6 +1182,7 @@ tab_organization = "조직 관리"
 tab_permissions = "권한"
 tab_profile = "프로필"
 tab_schema = "사용자 스키마"
+tab_relations = "세부 권한"
 title = "상세"
 
 [ui.admin.tenants.list]
@@ -1498,7 +1493,6 @@ email = "이메일"
 name = "이름"
 role = "역할"
 
-
 [ui.common.role]
 admin = "Admin"
 rp_admin = "RP Admin"
@@ -2006,3 +2000,24 @@ verify = "본인인증"
 
 [ui.userfront.signup.success]
 action = "로그인하기"
+
+[ui.admin.permissions_direct]
+tab_tenant = "테넌트 기능 권한"
+tab_system = "시스템 메뉴 권한 (Admin Control)"
+tab_system_title = "글로벌 메뉴 접근 제어 (Admin Control)"
+select_tenant = "대상 테넌트 선택"
+select_tenant_desc = "세부 기능 권한을 부여할 대상 테넌트를 리스트에서 선택해 주세요."
+placeholder = "-- 테넌트 선택 --"
+add_system_user = "시스템 권한 사용자 추가"
+dialog_title_system = "시스템 권한 관리 유저 추가"
+
+[msg.admin.permissions_direct]
+description = "테넌트의 세부 기능 권한 및 글로벌 사이드바 메뉴 탭 접근 권한을 지정하고 부여합니다."
+tab_system_desc = "사이드바 각 메뉴별 접근 권한을 사용자에게 직접 부여합니다. 최고 관리자(super_admin)는 기본적으로 언제나 모든 권한을 우회 통과합니다."
+system_empty = "지정된 글로벌 메뉴 세부 권한자가 없습니다. 사용자를 추가해 관리해 주세요."
+select_prompt = "상단에서 테넌트를 선택하면 세부 권한 격리 설정 격자가 노출됩니다."
+
+[msg.admin.system.relations]
+add_success = "시스템 메뉴 권한이 추가되었습니다."
+remove_success = "시스템 메뉴 권한이 회수되었습니다."
+remove_all_confirm = "이 사용자의 모든 시스템 메뉴 권한을 삭제하시겠습니까?"

adminfront/src/locales/template.toml

@@ -193,7 +193,6 @@ worksmobile_excluded = ""
 worksmobile_sync = ""
 allowed_domains = ""
 
-
 [msg.admin.ory_ssot]
 flush_confirm = ""
 flush_error = ""
@@ -981,6 +980,7 @@ org_chart = ""
 api_keys = ""
 audit_logs = ""
 auth_guard = ""
+permissions_direct = ""
 data_integrity = ""
 logout = ""
 overview = ""
@@ -1005,10 +1005,6 @@ title = ""
 [ui.admin.ory_ssot.forbidden]
 title = ""
 
-[ui.admin.ory_ssot.projection_card]
-description = ""
-title = ""
-
 [ui.admin.ory_ssot.status]
 failed = ""
 not_ready = ""
@@ -1017,11 +1013,8 @@ ready = ""
 [ui.admin.ory_ssot.summary]
 cache_keys = ""
 last_refreshed = ""
-last_synced = ""
-local_users = ""
 observed_identities = ""
 status = ""
-updated_at = ""
 
 [ui.admin.auth_guard]
 subtitle = ""
@@ -1193,6 +1186,7 @@ tab_organization = ""
 tab_permissions = ""
 tab_profile = ""
 tab_schema = ""
+tab_relations = ""
 title = ""
 
 [ui.admin.tenants.list]
@@ -1451,7 +1445,6 @@ email = ""
 name = ""
 role = ""
 
-
 [ui.common.role]
 admin = ""
 rp_admin = ""
@@ -1961,3 +1954,24 @@ verify = ""
 
 [ui.userfront.signup.success]
 action = ""
+
+[ui.admin.permissions_direct]
+tab_tenant = ""
+tab_system = ""
+tab_system_title = ""
+select_tenant = ""
+select_tenant_desc = ""
+placeholder = ""
+add_system_user = ""
+dialog_title_system = ""
+
+[msg.admin.permissions_direct]
+description = ""
+tab_system_desc = ""
+system_empty = ""
+select_prompt = ""
+
+[msg.admin.system.relations]
+add_success = ""
+remove_success = ""
+remove_all_confirm = ""