chore(payload): add admin page permission migration

Ultraworked with [Sisyphus](https://github.com/code-yeongyu/oh-my-openagent)

Co-authored-by: Sisyphus <clio-agent@sisyphuslabs.ai>

src/migrations/20260901_222200_add_admin_page_permissions.ts

@@ -0,0 +1,50 @@
+import { MigrateUpArgs, MigrateDownArgs, sql } from '@payloadcms/db-postgres'
+
+export async function up({ db, payload, req }: MigrateUpArgs): Promise<void> {
+  await db.execute(sql`
+   DO $$
+   DECLARE permission text;
+   BEGIN
+     FOREACH permission IN ARRAY ARRAY[
+       'media:create', 'media:read', 'media:update', 'media:delete', 'admin:media:manage',
+       'admin:users:manage', 'roles:create', 'roles:read', 'roles:update', 'roles:delete',
+       'admin:roles:manage', 'admin:ranks:manage', 'admin:profiles:manage', 'admin:awards:manage',
+       'admin:qualifications:manage', 'admin:assignments:manage', 'assignment-transfers:create',
+       'assignment-transfers:read', 'assignment-transfers:update', 'assignment-transfers:delete',
+       'admin:assignment-transfers:manage', 'admin:experience:manage',
+       'admin:user-notifications:manage', 'admin:evaluations:manage', 'admin:missions:manage',
+       'admin:mission-attendances:manage', 'admin:campaigns:manage', 'admin:factions:manage',
+       'admin:technologies:manage', 'admin:assets:manage', 'admin:resources:manage',
+       'admin:vehicles:manage', 'admin:structures:manage', 'admin:shipments:manage',
+       'admin:bank-accounts:manage', 'admin:bank-transactions:manage', 'admin:ledger-entries:manage',
+       'admin:locker-storages:manage', 'admin:loadouts:manage', 'admin:market-listings:manage',
+       'admin:market-negotiations:manage', 'admin:projects:manage', 'admin:labels:manage',
+       'admin:sprints:manage', 'admin:releases:manage', 'admin:tickets:manage',
+       'ticket-votes:create', 'ticket-votes:read', 'ticket-votes:update', 'ticket-votes:delete',
+       'admin:ticket-votes:manage', 'admin:game-structures:manage', 'admin:game-vehicles:manage',
+       'admin:game-npcs:manage', 'admin:game-hard-resources:manage', 'admin:game-event-logs:manage',
+       'admin:maps:manage', 'admin:narrative-events:manage', 'admin:mission-files:manage',
+       'admin:mod-lists:manage', 'game-servers:create', 'game-servers:read', 'game-servers:update',
+       'game-servers:delete', 'admin:game-servers:manage', 'arma-sync-events:create',
+       'arma-sync-events:read', 'arma-sync-events:update', 'arma-sync-events:delete',
+       'admin:arma-sync-events:manage', 'arma-commands:create', 'arma-commands:read',
+       'arma-commands:update', 'arma-commands:delete', 'admin:arma-commands:manage'
+     ] LOOP
+       IF NOT EXISTS (
+         SELECT 1 FROM pg_enum e
+         JOIN pg_type t ON t.oid = e.enumtypid
+         WHERE t.typname = 'enum_roles_permissions' AND e.enumlabel = permission
+       ) THEN
+         EXECUTE format('ALTER TYPE public.enum_roles_permissions ADD VALUE %L', permission);
+       END IF;
+     END LOOP;
+   END $$;`)
+}
+
+export async function down({ db, payload, req }: MigrateDownArgs): Promise<void> {
+  await db.execute(sql`
+   ALTER TABLE "roles_permissions" ALTER COLUMN "value" SET DATA TYPE text;
+  DROP TYPE "public"."enum_roles_permissions";
+  CREATE TYPE "public"."enum_roles_permissions" AS ENUM('system:admin-access', 'users:create', 'users:read', 'users:update', 'users:delete', 'users:unlock', 'users:assign-roles', 'ranks:create', 'ranks:read', 'ranks:update', 'ranks:delete', 'profiles:create', 'profiles:read', 'profiles:update', 'profiles:delete', 'awards:create', 'awards:read', 'awards:update', 'awards:delete', 'qualifications:create', 'qualifications:read', 'qualifications:update', 'qualifications:delete', 'assignments:create', 'assignments:read', 'assignments:update', 'assignments:delete', 'experience:create', 'experience:read', 'experience:update', 'experience:delete', 'user-notifications:create', 'user-notifications:read', 'user-notifications:update', 'user-notifications:delete', 'evaluations:create', 'evaluations:read', 'evaluations:update', 'evaluations:delete', 'missions:create', 'missions:read', 'missions:update', 'missions:delete', 'missions:read-sensitive', 'mission-attendances:create', 'mission-attendances:read', 'mission-attendances:update', 'mission-attendances:delete', 'campaigns:create', 'campaigns:read', 'campaigns:update', 'campaigns:delete', 'campaigns:manage', 'factions:create', 'factions:read', 'factions:update', 'factions:delete', 'technologies:create', 'technologies:read', 'technologies:update', 'technologies:delete', 'assets:create', 'assets:read', 'assets:update', 'assets:delete', 'resources:create', 'resources:read', 'resources:update', 'resources:delete', 'vehicles:create', 'vehicles:read', 'vehicles:update', 'vehicles:delete', 'structures:create', 'structures:read', 'structures:update', 'structures:delete', 'shipments:create', 'shipments:read', 'shipments:update', 'shipments:delete', 'bank-accounts:create', 'bank-accounts:read', 'bank-accounts:update', 'bank-accounts:delete', 'bank-transactions:create', 'bank-transactions:read', 'bank-transactions:update', 'bank-transactions:delete', 'ledger-entries:create', 'ledger-entries:read', 'ledger-entries:update', 'ledger-entries:delete', 'locker-storages:create', 'locker-storages:read', 'locker-storages:update', 'locker-storages:delete', 'loadouts:create', 'loadouts:read', 'loadouts:update', 'loadouts:delete', 'market-listings:create', 'market-listings:read', 'market-listings:update', 'market-listings:delete', 'market-negotiations:create', 'market-negotiations:read', 'market-negotiations:update', 'market-negotiations:delete', 'projects:create', 'projects:read', 'projects:update', 'projects:delete', 'labels:create', 'labels:read', 'labels:update', 'labels:delete', 'sprints:create', 'sprints:read', 'sprints:update', 'sprints:delete', 'releases:create', 'releases:read', 'releases:update', 'releases:delete', 'tickets:create', 'tickets:read', 'tickets:update', 'tickets:delete', 'game-structures:create', 'game-structures:read', 'game-structures:update', 'game-structures:delete', 'game-vehicles:create', 'game-vehicles:read', 'game-vehicles:update', 'game-vehicles:delete', 'game-npcs:create', 'game-npcs:read', 'game-npcs:update', 'game-npcs:delete', 'game-hard-resources:create', 'game-hard-resources:read', 'game-hard-resources:update', 'game-hard-resources:delete', 'game-event-logs:create', 'game-event-logs:read', 'game-event-logs:update', 'game-event-logs:delete', 'maps:create', 'maps:read', 'maps:update', 'maps:delete', 'narrative-events:create', 'narrative-events:read', 'narrative-events:update', 'narrative-events:delete', 'mission-files:create', 'mission-files:read', 'mission-files:update', 'mission-files:delete', 'mod-lists:create', 'mod-lists:read', 'mod-lists:update', 'mod-lists:delete', 'game-rules:read', 'game-rules:update', 'shims:read', 'shims:update', 'logistics:manage', 'intelligence:manage', 'profiles:intel_excerpt:update', 'banking:manage', 'tickets:staff', 'discord:staff', 'discord:announce');
+  ALTER TABLE "roles_permissions" ALTER COLUMN "value" SET DATA TYPE "public"."enum_roles_permissions" USING "value"::"public"."enum_roles_permissions";`)
+}

src/migrations/index.ts

@@ -13,6 +13,7 @@ import * as migration_20260831_142503 from './20260831_142503';
 import * as migration_20260831_180233_assignment_transfers from './20260831_180233_assignment_transfers';
 import * as migration_20260901_014006_add_assignment_transfer_event_target from './20260901_014006_add_assignment_transfer_event_target';
 import * as migration_20260901_213108_add_ticket_votes_and_edit_history from './20260901_213108_add_ticket_votes_and_edit_history';
+import * as migration_20260901_222200_add_admin_page_permissions from './20260901_222200_add_admin_page_permissions';
 
 export const migrations = [
   {
@@ -88,6 +89,11 @@ export const migrations = [
   {
     up: migration_20260901_213108_add_ticket_votes_and_edit_history.up,
     down: migration_20260901_213108_add_ticket_votes_and_edit_history.down,
-    name: '20260901_213108_add_ticket_votes_and_edit_history'
+    name: '20260901_213108_add_ticket_votes_and_edit_history',
+  },
+  {
+    up: migration_20260901_222200_add_admin_page_permissions.up,
+    down: migration_20260901_222200_add_admin_page_permissions.down,
+    name: '20260901_222200_add_admin_page_permissions'
   },
 ];