feat: harden SaaS authentication and authorization

Tiku.Api/Contracts/TenantAdminDirectDtos.cs

@@ -97,19 +97,6 @@ public sealed class TenantAdminAuditLogQueryDto
     }
 }
 
-public sealed class TenantAdminRoleTemplateQueryDto
-{
-    public string? Status { get; set; }
-
-    [Range(1, 500)]
-    public int? Limit { get; set; }
-
-    public TenantAdminRoleTemplateFilter ToFilter()
-    {
-        return new TenantAdminRoleTemplateFilter(Status, Limit);
-    }
-}
-
 public sealed class TenantAdminBadgeQueryDto
 {
     public string? Category { get; set; }
@@ -324,13 +311,11 @@ public sealed class UpsertTenantAdminMemberDto
     public TenantAdminUserLookupDto User { get; set; } = new();
     public string? Role { get; set; }
     public string? Status { get; set; }
-    public Guid? RoleTemplateId { get; set; }
-    public JsonElement Permissions { get; set; } = JsonDefaults.Object();
     public string? PrimaryRole { get; set; }
 
     public UpsertTenantAdminMemberCommand ToCommand()
     {
-        return new UpsertTenantAdminMemberCommand(MembershipId, User.ToCommand(), Role, Status, RoleTemplateId, Permissions, PrimaryRole);
+        return new UpsertTenantAdminMemberCommand(MembershipId, User.ToCommand(), Role, Status, PrimaryRole);
     }
 }
 
@@ -340,45 +325,6 @@ public sealed class DisableTenantAdminMemberDto
     public Guid MembershipId { get; set; }
 }
 
-public sealed class UpsertTenantAdminRoleTemplateDto
-{
-    public Guid? Id { get; set; }
-    public string? Code { get; set; }
-    public required string Name { get; set; }
-    public string? Description { get; set; }
-    public string? BaseRole { get; set; }
-    public string? Status { get; set; }
-    public JsonElement Permissions { get; set; } = JsonDefaults.Object();
-    public JsonElement MenuPermissions { get; set; } = JsonDefaults.Object();
-    public JsonElement ModulePermissions { get; set; } = JsonDefaults.Object();
-    public JsonElement FieldPermissions { get; set; } = JsonDefaults.Object();
-    public JsonElement DataScope { get; set; } = JsonDefaults.Object();
-    public int? Order { get; set; }
-
-    public UpsertTenantAdminRoleTemplateCommand ToCommand()
-    {
-        return new UpsertTenantAdminRoleTemplateCommand(
-            Id,
-            Code,
-            Name,
-            Description,
-            BaseRole,
-            Status,
-            Permissions,
-            MenuPermissions,
-            ModulePermissions,
-            FieldPermissions,
-            DataScope,
-            Order);
-    }
-}
-
-public sealed class DisableTenantAdminRoleTemplateDto
-{
-    [Required]
-    public Guid RoleTemplateId { get; set; }
-}
-
 public sealed class UpsertTenantBrandingDto
 {
     public required string BrandName { get; set; }