Initial commit — multi-tenant filtering, port constraints, chart bbox

backend/models/user.py

@@ -4,9 +4,10 @@ from database import Base
 import enum
 
 class Role(str, enum.Enum):
-    SUPERADMIN = "SUPERADMIN"
-    ADMIN      = "ADMIN"
-    USER       = "USER"
+    SUPERADMIN   = "SUPERADMIN"
+    ADMIN        = "ADMIN"
+    CLIENT_ADMIN = "CLIENT_ADMIN"   # company-scoped: can start/stop recordings for own aids
+    USER         = "USER"           # company-scoped: read-only
 
 class User(Base):
     __tablename__ = "users"
@@ -17,6 +18,7 @@ class User(Base):
     email       = Column(String, unique=True, nullable=True)
     hashed_pw   = Column(String, nullable=False)
     role        = Column(String, default="USER")
+    company_id  = Column(String, nullable=True)
     activo      = Column(Boolean, default=True)
     creado_en   = Column(DateTime, server_default=func.now())
     ultimo_login = Column(DateTime, nullable=True)