Superadmin role (level 999) is managed via env config only. Hide X button for superadmin assignments and show ENV badge instead. Filter superadmin from assignable roles dropdown. Add envManaged translation to all 4 locales.
- deleteMutation onError in AdminRoles and AdminPolicies - revokeMutation onError in AdminRoleAssign - handleExport error handling in AdminAuditLog - add missing i18n keys: deleteFailed, revokeFailed, exportError
- Permission store (Zustand) with wildcard matching and role level checks - PermissionRoute guard for route-level access control - PermissionGate component for element-level visibility - Admin Roles page: CRUD, permission editor, role assignment - Admin Policies page: ABAC policy management (time/IP conditions) - Admin Audit Log page: filterable log viewer with CSV export - AdminPanel sidebar navigation gated by permissions - 4 locale files updated (en, ru, zh, fa) with RBAC translations - API client module for all RBAC endpoints