Merge origin/dev into dev

adminfront/src/locales/en.toml

@@ -972,6 +972,7 @@ org_chart = "Org Chart"
 api_keys = "API Keys"
 audit_logs = "Audit Logs"
 auth_guard = "Auth Guard"
+permissions_direct = "Direct Permissions"
 data_integrity = "Data Integrity"
 logout = "Logout"
 overview = "Overview"
@@ -996,10 +997,6 @@ title = "Redis identity cache"
 [ui.admin.ory_ssot.forbidden]
 title = "Access denied"
 
-[ui.admin.ory_ssot.projection_card]
-description = "PostgreSQL read model status used by admin search and statistics."
-title = "Backend user read model"
-
 [ui.admin.ory_ssot.status]
 failed = "failed"
 not_ready = "not ready"
@@ -1008,11 +1005,8 @@ ready = "ready"
 [ui.admin.ory_ssot.summary]
 cache_keys = "Cache keys"
 last_refreshed = "Last refreshed"
-last_synced = "Last read-model refresh"
-local_users = "Local users"
 observed_identities = "Observed identities"
 status = "Status"
-updated_at = "Updated at"
 
 [ui.admin.auth_guard]
 subtitle = "Verify admin privileges and ReBAC relationships against the policy engine."
@@ -1184,6 +1178,7 @@ tab_organization = "Organization Manage"
 tab_permissions = "Permissions"
 tab_profile = "Profile"
 tab_schema = "Tab Schema"
+tab_relations = "Fine-grained Permissions"
 title = "Details"
 
 [ui.admin.tenants.list]
@@ -1494,7 +1489,6 @@ email = "Email"
 name = "Name"
 role = "Role"
 
-
 [ui.common.role]
 admin = "Admin"
 rp_admin = "RP Admin"
@@ -2006,3 +2000,24 @@ verify = "Verify"
 
 [ui.userfront.signup.success]
 action = "Action"
+
+[ui.admin.permissions_direct]
+tab_tenant = "Tenant Features"
+tab_system = "Admin Control"
+tab_system_title = "Global Sidebar Access Control"
+select_tenant = "Select target tenant"
+select_tenant_desc = "Select target tenant to assign fine-grained permissions."
+placeholder = "-- Select Tenant --"
+add_system_user = "Add User to Admin Control"
+dialog_title_system = "Add User to Global Permissions"
+
+[msg.admin.permissions_direct]
+description = "Directly assign and manage tab-level direct permissions and global sidebar menu access."
+tab_system_desc = "Directly grant users access to each sidebar menu page. Super admins always bypass and pass all access checks."
+system_empty = "No users with custom global menu permissions found. Add users to start managing."
+select_prompt = "Select a tenant from the dropdown above to manage its fine-grained features."
+
+[msg.admin.system.relations]
+add_success = "Global menu permission added successfully."
+remove_success = "Global menu permission revoked successfully."
+remove_all_confirm = "Are you sure you want to revoke all global menu permissions for this user?"