latest

backend/app/Http/Controllers/Api/RoleController.php

@@ -0,0 +1,20 @@
+<?php
+
+namespace App\Http\Controllers\Api;
+
+use App\Http\Controllers\Controller;
+use App\Http\Resources\RoleResource;
+use Illuminate\Http\Request;
+use Spatie\Permission\Models\Role;
+
+class RoleController extends Controller
+{
+    public function index(Request $request)
+    {
+        abort_unless($request->user()->can('roles.view'), 403);
+
+        // Super Admin is intentionally excluded — it's granted only via
+        // seeding/tinker, never assignable through the Users module.
+        return RoleResource::collection(Role::where('name', '!=', 'super-admin')->orderBy('name')->get());
+    }
+}