feat: VivesPOS landing on Winter CMS 1.2 — theme + plugin + Dockerfile

- Base: wintercms/winter branch 1.2 (full framework)
- Theme vivespos: Canvas 7 + Bootstrap 5 CDN, custom CSS
- Layout: deferred GTM/GA4 tracking, JSON-LD SoftwareApplication
- Partials: hero (offline-first), features, modes (offline/nube toggle),
  screenshots, pricing (3 planes), comparison, FAQ, CTA
- Plugin VivesPOS.Site with ContactForm
- Dockerfile: PHP 8.2 Apache, port 80, healthcheck
- Added winter/wn-pages, blog, sitemap, seo plugins
- Active theme set to vivespos

modules/backend/models/UserRole.php

@@ -0,0 +1,101 @@
+<?php namespace Backend\Models;
+
+use Backend\Classes\AuthManager;
+use Winter\Storm\Auth\Models\Role as RoleBase;
+
+/**
+ * Administrator role
+ *
+ * @package winter\wn-backend-module
+ * @author Alexey Bobkov, Samuel Georges
+ */
+class UserRole extends RoleBase
+{
+    const CODE_DEVELOPER = 'developer';
+    const CODE_PUBLISHER = 'publisher';
+
+    /**
+     * @var string The database table used by the model.
+     */
+    protected $table = 'backend_user_roles';
+
+    /**
+     * @var array Validation rules
+     */
+    public $rules = [
+        'name' => 'required|between:2,128|unique',
+        'code' => 'unique',
+    ];
+
+    /**
+     * @var array Relations
+     */
+    public $hasMany = [
+        'users' => [User::class, 'key' => 'role_id'],
+        'users_count' => [User::class, 'key' => 'role_id', 'count' => true]
+    ];
+
+    public function filterFields($fields)
+    {
+        // System roles cannot have their code or permissions changed
+        if ($this->isSystemRole()) {
+            $fields->code->disabled = true;
+            $fields->permissions->disabled = true;
+        }
+    }
+
+    public function afterFetch()
+    {
+        // System role permissions are determined by the permissions that attach
+        // themselves to the given role's code via the `roles` property.
+        if ($this->isSystemRole()) {
+            $this->permissions = $this->getDefaultPermissions();
+        }
+    }
+
+    public function beforeSave()
+    {
+        // System roles cannot have their code or permissions changed
+        if ($this->isSystemRole()) {
+            $this->is_system = true;
+            $this->permissions = [];
+            if ($this->exists) {
+                $this->code = $this->getOriginal('code');
+            }
+        }
+    }
+
+    public function isSystemRole()
+    {
+        // System roles must have a valid code property
+        if (!$this->code || !strlen(trim($this->code))) {
+            return false;
+        }
+
+        // Winter default system roles
+        if ($this->is_system || in_array($this->code, [
+            self::CODE_DEVELOPER,
+            self::CODE_PUBLISHER
+        ])) {
+            return true;
+        }
+
+        // If any permission attaches itself to a given role's code
+        // that role is now considered a system role
+        return AuthManager::instance()->hasPermissionsForRole($this->code);
+    }
+
+    /**
+     * Get the permissions that have attached themselves to the current role
+     */
+    public function getDefaultPermissions(): array
+    {
+        // Only the Develper role inherits all "orphaned" / unassigned permissions by default
+        $includeOrphanedPermissions = false;
+        if ($this->code === self::CODE_DEVELOPER) {
+            $includeOrphanedPermissions = true;
+        }
+
+        return AuthManager::instance()->listPermissionsForRole($this->code, $includeOrphanedPermissions);
+    }
+}