Module sites (#8)

| Numéro du ticket | Titre du ticket |
|------------------|-----------------|
|                  |                 |

## Description de la PR

## Modification du .env

## Check list

- [x] Pas de régression
- [x] TU/TI/TF rédigée
- [x] TU/TI/TF OK
- [ ] CHANGELOG modifié

Co-authored-by: Matthieu <mtholot19@gmail.com>
Reviewed-on: MALIO-DEV/Coltura#8
Co-authored-by: tristan <tristan@yuno.malio.fr>
Co-committed-by: tristan <tristan@yuno.malio.fr>

frontend/modules/core/components/UserRbacDrawer.vue

@@ -64,6 +64,27 @@
                 </div>
             </div>
 
+            <!-- Section Sites autorises (ticket 2 module Sites) -->
+            <div>
+                <h4 class="mb-3 text-sm font-semibold text-neutral-700">
+                    {{ t('admin.users.drawer.sitesSection') }}
+                </h4>
+                <div v-if="allSites.length === 0" class="text-sm text-neutral-400">
+                    {{ t('admin.sites.noSites') }}
+                </div>
+                <div class="flex flex-col gap-2">
+                    <MalioCheckbox
+                        v-for="site in allSites"
+                        :id="`site-${site.id}`"
+                        :key="site.id"
+                        :label="site.name"
+                        :model-value="selectedSiteIds.has(site.id)"
+                        label-class="text-sm text-neutral-600"
+                        @update:model-value="(val: boolean) => toggleSite(site.id, val)"
+                    />
+                </div>
+            </div>
+
             <!-- Section Resume permissions effectives -->
             <div>
                 <h4 class="mb-3 text-sm font-semibold text-neutral-700">
@@ -92,6 +113,7 @@
 
 <script setup lang="ts">
 import type { Permission, Role, UserListItem, EffectivePermission } from '~/shared/types/rbac'
+import type { Site } from '~/shared/types/sites'
 
 interface PermissionModule {
     module: string
@@ -115,10 +137,12 @@ const emit = defineEmits<{
 const saving = ref(false)
 const allRoles = ref<Role[]>([])
 const allPermissions = ref<Permission[]>([])
+const allSites = ref<Site[]>([])
 
 const form = ref({ isAdmin: false })
 const selectedRoleIds = ref(new Set<number>())
 const selectedDirectPermissionIds = ref(new Set<number>())
+const selectedSiteIds = ref(new Set<number>())
 
 // Detecter l'auto-edition
 const isSelfEdit = computed(() => props.user?.id === auth.user?.id)
@@ -182,14 +206,17 @@ const effectivePermissions = computed<EffectivePermission[]>(() => {
         .sort((a, b) => a.code.localeCompare(b.code))
 })
 
-// Charger roles et permissions
+// Charger roles, permissions et sites en parallele pour minimiser le TTFB
+// a l'ouverture du drawer.
 async function loadData() {
-    const [rolesData, permsData] = await Promise.all([
+    const [rolesData, permsData, sitesData] = await Promise.all([
         api.get<{ member: Role[] }>('/roles', {}, { toast: false }),
         api.get<{ member: Permission[] }>('/permissions', { orphan: false, itemsPerPage: 999 }, { toast: false }),
+        api.get<{ member: Site[] }>('/sites', { itemsPerPage: 999 }, { toast: false }),
     ])
     allRoles.value = rolesData.member
     allPermissions.value = permsData.member
+    allSites.value = sitesData.member
 }
 
 // Remplir le formulaire quand le user change
@@ -198,10 +225,12 @@ watch(() => props.user, (user) => {
         form.value.isAdmin = user.isAdmin
         selectedRoleIds.value = new Set(user.roles.map(iriToId))
         selectedDirectPermissionIds.value = new Set(user.directPermissions.map(iriToId))
+        selectedSiteIds.value = new Set((user.sites ?? []).map(iriToId))
     } else {
         form.value.isAdmin = false
         selectedRoleIds.value = new Set()
         selectedDirectPermissionIds.value = new Set()
+        selectedSiteIds.value = new Set()
     }
 }, { immediate: true })
 
@@ -235,6 +264,13 @@ function handleToggleAll(module: string, selected: boolean) {
     selectedDirectPermissionIds.value = ids
 }
 
+function toggleSite(id: number, selected: boolean) {
+    const ids = new Set(selectedSiteIds.value)
+    if (selected) ids.add(id)
+    else ids.delete(id)
+    selectedSiteIds.value = ids
+}
+
 async function handleSave() {
     if (!props.user) return
     saving.value = true
@@ -243,6 +279,7 @@ async function handleSave() {
             isAdmin: form.value.isAdmin,
             roles: Array.from(selectedRoleIds.value).map(id => `/api/roles/${id}`),
             directPermissions: Array.from(selectedDirectPermissionIds.value).map(id => `/api/permissions/${id}`),
+            sites: Array.from(selectedSiteIds.value).map(id => `/api/sites/${id}`),
         }, {
             toastSuccessMessage: t('admin.users.toast.updated'),
         })

frontend/modules/core/pages/admin/users.vue

@@ -38,6 +38,7 @@
 
 <script setup lang="ts">
 import type { UserListItem } from '~/shared/types/rbac'
+import type { Site } from '~/shared/types/sites'
 
 const { t } = useI18n()
 const api = useApi()
@@ -48,6 +49,7 @@ useHead({ title: t('admin.users.title') })
 const canManage = computed(() => can('core.users.manage'))
 
 const users = ref<UserListItem[]>([])
+const sitesById = ref(new Map<number, Site>())
 const loading = ref(false)
 const drawerOpen = ref(false)
 const selectedUser = ref<UserListItem | null>(null)
@@ -57,8 +59,14 @@ const columns = [
     { key: 'admin', label: t('admin.users.table.admin') },
     { key: 'roles', label: t('admin.users.table.roles') },
     { key: 'directPermissions', label: t('admin.users.table.directPermissions') },
+    { key: 'sites', label: t('admin.users.table.sites') },
 ]
 
+// Extraire l'id numerique depuis une IRI API Platform type `/api/sites/3`.
+function iriToId(iri: string): number {
+    return Number(iri.split('/').pop())
+}
+
 const userItems = computed(() =>
     users.value.map(user => ({
         id: user.id,
@@ -66,18 +74,27 @@ const userItems = computed(() =>
         admin: user.isAdmin,
         roles: user.roles.length,
         directPermissions: user.directPermissions.length,
-    }))
+        // Affichage : liste des noms de sites separes par virgule. Les IRIs
+        // du payload /api/users (groupe user:list) sont resolues via la Map
+        // construite en parallele depuis /api/sites.
+        sites: (user.sites ?? [])
+            .map(iri => sitesById.value.get(iriToId(iri))?.name)
+            .filter((name): name is string => Boolean(name))
+            .join(', '),
+    })),
 )
 
 async function loadUsers() {
     loading.value = true
     try {
-        const data = await api.get<{ member: UserListItem[] }>(
-            '/users',
-            {},
-            { toast: false },
-        )
-        users.value = data.member
+        // Chargement parallele : les sites alimentent la Map de resolution
+        // IRI→name pour la colonne "Sites" de la table.
+        const [usersData, sitesData] = await Promise.all([
+            api.get<{ member: UserListItem[] }>('/users', {}, { toast: false }),
+            api.get<{ member: Site[] }>('/sites', { itemsPerPage: 999 }, { toast: false }),
+        ])
+        users.value = usersData.member
+        sitesById.value = new Map(sitesData.member.map(s => [s.id, s]))
     } finally {
         loading.value = false
     }

frontend/modules/core/pages/logout.vue

@@ -9,10 +9,23 @@ definePageMeta({ layout: 'auth' })
 
 const auth = useAuthStore()
 const { resetSidebar } = useSidebar()
+const { resetModules } = useModules()
+const { resetCurrentSite } = useCurrentSite()
 
 onMounted(async () => {
-    await auth.logout()
-    resetSidebar()
-    await navigateTo('/login')
+    try {
+        await auth.logout()
+    } finally {
+        // Les resets sont garantis meme si auth.logout() rejette : eviter
+        // qu'un user suivant (connecte sur le meme onglet) voie l'etat de
+        // l'ancien. Les trois fonctions reset sont synchrones et ne
+        // peuvent pas throw (juste des assignations reactives).
+        // navigateTo est dans le finally pour garantir la redirection
+        // meme si auth.logout() lance une exception (ex: reseau coupé).
+        resetSidebar()
+        resetModules()
+        resetCurrentSite()
+        await navigateTo('/login')
+    }
 })
 </script>