domain: add Identity & Access entities (User, Role, Permission, Group)

crates/domain/tests/entities/role.rs

@@ -0,0 +1,9 @@
+use domain::entities::{Role, PermissionAction, ResourceType};
+use domain::entities::permission::viewer_permissions;
+
+#[test]
+fn role_checks_permission() {
+    let role = Role::new("viewer", viewer_permissions(), true);
+    assert!(role.has_permission(PermissionAction::ReadAsset, ResourceType::Global));
+    assert!(!role.has_permission(PermissionAction::DeleteAsset, ResourceType::Global));
+}