set(AuthorizationService::class, static fn (AppContainer $c): AuthorizationService => $c->get(AccessServicesFactory::class)->createAuthorizationService()); $container->set(UiAccessService::class, static fn (AppContainer $c): UiAccessService => new UiAccessService( $c->get(AuthorizationService::class), $c->has(ModuleRegistry::class) ? $c->get(ModuleRegistry::class) : null )); $container->set(PermissionService::class, static fn (AppContainer $c): PermissionService => $c->get(AccessServicesFactory::class)->createPermissionService()); // RoleService lives in DirectoryServicesFactory (not AccessServicesFactory) because // role management involves directory-level concerns (departments, tenant structure). $container->set(RoleService::class, static fn (AppContainer $c): RoleService => $c->get(DirectoryServicesFactory::class)->createRoleService()); $container->set(PermissionRepository::class, static fn (AppContainer $c): PermissionRepository => $c->get(AccessServicesFactory::class)->createPermissionRepository()); $container->set(RolePermissionRepository::class, static fn (AppContainer $c): RolePermissionRepository => $c->get(AccessServicesFactory::class)->createRolePermissionRepository()); $container->set(RoleAssignableRoleRepository::class, static fn (AppContainer $c): RoleAssignableRoleRepository => $c->get(AccessServicesFactory::class)->createRoleAssignableRoleRepository()); $container->set(RoleRepository::class, static fn (AppContainer $c): RoleRepository => $c->get(DirectoryServicesFactory::class)->createRoleRepository()); $container->set(AssignableRoleService::class, static fn (AppContainer $c): AssignableRoleService => new AssignableRoleService( $c->get(RoleAssignableRoleRepository::class), $c->get(AccessServicesFactory::class)->createUserRoleRepository(), $c->get(PermissionService::class), $c->get(RoleRepository::class), $c->get(AuditRecorderInterface::class) )); } }