shoc-backend/Data.SeaHavenIndustries/Auth/UserPermissionOverride.cs

using Data.SeaHavenIndustries.Enums;

namespace Data.SeaHavenIndustries
{
    /// <summary>
    /// Per-person team permission override, keyed by user and canonical
    /// permission key. Explicit Allow/Deny rows take precedence over role defaults;
    /// <see cref="UserPermissionState.Unset"/> (and a missing row) falls back to
    /// the role default.
    /// </summary>
    public class UserPermissionOverride
    {
        public string UserId { get; set; } = null!;
        public string PermissionKey { get; set; } = null!;
        public UserPermissionState State { get; set; } = UserPermissionState.Unset;
        public virtual ApplicationUser? User { get; set; }
    }
}