Initial commit: teaching institution management API.

Express/MongoDB backend with JWT auth, RBAC, S3 uploads, notifications, and scheduled jobs.

components/roles/roleController.js

@@ -0,0 +1,35 @@
+// /components/roles/roleController.js
+
+const catchAsync = require('../../utils/catchAsync');
+const roleService = require('./roleService');
+const { successResponse, listResponse } = require('../../utils/apiResponse');
+
+exports.createRole = catchAsync(async (req, res, next) => {
+  const role = await roleService.createRole(req.body);
+  return successResponse(res, 201, 'Role created successfully', role);
+});
+
+exports.getRole = catchAsync(async (req, res, next) => {
+  const role = await roleService.getRole(req.params.id);
+  return successResponse(res, 200, 'Role retrieved successfully', role);
+});
+
+exports.getAllRoles = catchAsync(async (req, res, next) => {
+  const { data, meta } = await roleService.getAllRoles(req.query);
+  return listResponse(res, 200, data, meta);
+});
+
+exports.updateRole = catchAsync(async (req, res, next) => {
+  const role = await roleService.updateRole(req.params.id, req.body);
+  return successResponse(res, 200, 'Role updated successfully', role);
+});
+
+exports.deleteRole = catchAsync(async (req, res, next) => {
+  await roleService.deleteRole(req.params.id);
+  return successResponse(res, 200, 'Role deleted successfully');
+});
+
+exports.searchRoles = catchAsync(async (req, res, next) => {
+  const { data, meta } = await roleService.searchRoles(req.query);
+  return listResponse(res, 200, data, meta);
+});

components/roles/roleModel.js

@@ -0,0 +1,29 @@
+// /components/roles/roleModel.js
+
+const mongoose = require('mongoose');
+
+const roleSchema = new mongoose.Schema({
+  name: {
+    type: String,
+    required: true,
+    unique: true,
+    trim: true,
+    index: true
+  },
+  description: {
+    type: String,
+    trim: true
+  },
+  permissions: [{
+    type: String,
+    trim: true
+  }],
+  isSystem: {
+    type: Boolean,
+    default: false
+  }
+}, {
+  timestamps: true
+});
+
+module.exports = mongoose.model('Role', roleSchema);

components/roles/roleRoutes.js

@@ -0,0 +1,21 @@
+// /components/roles/roleRoutes.js
+
+const express = require('express');
+const roleController = require('./roleController');
+const { validateCreateRole, validateUpdateRole } = require('./roleValidator');
+const authMiddleware = require('../../middlewares/authMiddleware');
+const perm = require('../../middlewares/permissionMiddleware');
+const { PERMISSIONS } = require('../../constants/permissions');
+
+const router = express.Router();
+
+router.use(authMiddleware);
+
+router.post('/admin/create', perm.requires(PERMISSIONS.ROLES_CREATE), validateCreateRole, roleController.createRole);
+router.get('/admin/get-all', perm.requires(PERMISSIONS.ROLES_READ), roleController.getAllRoles);
+router.get('/admin/search', perm.requires(PERMISSIONS.ROLES_SEARCH), roleController.searchRoles);
+router.get('/admin/get-one/:id', perm.requires(PERMISSIONS.ROLES_READ), roleController.getRole);
+router.put('/admin/update/:id', perm.requires(PERMISSIONS.ROLES_UPDATE), validateUpdateRole, roleController.updateRole);
+router.delete('/admin/delete/:id', perm.requires(PERMISSIONS.ROLES_DELETE), roleController.deleteRole);
+
+module.exports = router;

components/roles/roleService.js

@@ -0,0 +1,84 @@
+// /components/roles/roleService.js
+
+const Role = require('./roleModel');
+const AppError = require('../../utils/AppError');
+const { parsePaginationAndSort, buildFilterQuery, calculateMeta } = require('../../utils/pagination');
+
+const createRole = async (roleData) => {
+  const existing = await Role.findOne({ name: roleData.name });
+  if (existing) {
+    throw new AppError('ROLE_ALREADY_EXISTS');
+  }
+  const role = await Role.create(roleData);
+  return role;
+};
+
+const getRole = async (id) => {
+  const role = await Role.findById(id);
+  if (!role) {
+    throw new AppError('ROLE_NOT_FOUND');
+  }
+  return role;
+};
+
+const getAllRoles = async (queryParams = {}) => {
+  const { page, limit, skip, sort } = parsePaginationAndSort(queryParams);
+  const filter = buildFilterQuery(queryParams, ['name', 'description']);
+
+  const [roles, totalCount] = await Promise.all([
+    Role.find(filter).sort(sort).skip(skip).limit(limit),
+    Role.countDocuments(filter)
+  ]);
+
+  const meta = calculateMeta(totalCount, page, limit);
+  return { data: roles, meta };
+};
+
+const updateRole = async (id, updateData) => {
+  const role = await Role.findById(id);
+  if (!role) {
+    throw new AppError('ROLE_NOT_FOUND');
+  }
+
+  if (role.isSystem) {
+    throw new AppError('SYSTEM_ROLE_PROTECTED');
+  }
+
+  if (updateData.name && updateData.name !== role.name) {
+    const existing = await Role.findOne({ name: updateData.name });
+    if (existing) {
+      throw new AppError('ROLE_ALREADY_EXISTS');
+    }
+  }
+
+  Object.assign(role, updateData);
+  await role.save();
+  return role;
+};
+
+const deleteRole = async (id) => {
+  const role = await Role.findById(id);
+  if (!role) {
+    throw new AppError('ROLE_NOT_FOUND');
+  }
+
+  if (role.isSystem) {
+    throw new AppError('SYSTEM_ROLE_PROTECTED');
+  }
+
+  await Role.findByIdAndDelete(id);
+  return null;
+};
+
+const searchRoles = async (queryParams) => {
+  return getAllRoles(queryParams);
+};
+
+module.exports = {
+  createRole,
+  getRole,
+  getAllRoles,
+  updateRole,
+  deleteRole,
+  searchRoles
+};

components/roles/roleValidator.js

@@ -0,0 +1,6 @@
+// Stub validator — pass-through middleware (no validation yet)
+const passThrough = (req, res, next) => next();
+
+module.exports = new Proxy({}, {
+  get: () => passThrough
+});