feat(admin-rbac): implement role-based admin permissions, limits, and owner setup flow

Dockerfile

@@ -36,9 +36,6 @@ RUN apt-get update && apt-get install -y --no-install-recommends \
 COPY cli_wrapper.sh /usr/bin/pasarguard-cli
 RUN chmod +x /usr/bin/pasarguard-cli
 
-COPY tui_wrapper.sh /usr/bin/pasarguard-tui
-RUN chmod +x /usr/bin/pasarguard-tui
-
 # Copy healthcheck script
 COPY healthcheck.sh /code/healthcheck.sh
 RUN chmod +x /code/healthcheck.sh

Makefile

@@ -102,12 +102,6 @@ run:
 run-cli:
 	@uv run pasarguard-cli.py
 
-# run pasarguard-tui
-.PHONY: run-tui
-run-tui:
-	@uv run pasarguard-tui.py
-
-
 # Run tests
 .PHONY: test
 test:

app/app_factory.py

@@ -131,4 +131,20 @@ def validation_exception_handler(request: Request, exc: RequestValidationError):
             content=jsonable_encoder({"detail": details}),
         )
 
+    from app.operation.permissions import LimitExceeded, PermissionDenied  # noqa: F401
+
+    @app.exception_handler(PermissionDenied)
+    async def permission_denied_handler(request: Request, exc: PermissionDenied):
+        return JSONResponse(
+            status_code=status.HTTP_403_FORBIDDEN,
+            content={"detail": exc.detail},
+        )
+
+    @app.exception_handler(LimitExceeded)
+    async def limit_exceeded_handler(request: Request, exc: LimitExceeded):
+        return JSONResponse(
+            status_code=status.HTTP_400_BAD_REQUEST,
+            content={"detail": exc.detail},
+        )
+
     return app