Add 35+ test functions covering Role and Permission management:
RoleHandler Tests:
- CreateRole_Success: create role with code/name/description
- CreateRole_MissingCode: validation required field
- CreateRole_MissingName: validation required field
- CreateRole_DuplicateCode: conflict handling
- CreateRole_NonAdmin_Forbidden: admin-only protection
- ListRoles_Success: list all roles
- ListRoles_Pagination: page/page_size parameters
- GetRole_Success: retrieve role details
- GetRole_NotFound: 404 for missing role
- GetRole_InvalidID: 400 for invalid ID
- UpdateRole_Success: modify role properties
- UpdateRole_NotFound: 404 for missing role
- UpdateRole_InvalidID: 400 for invalid ID
- UpdateRole_NonAdmin_Forbidden: admin-only protection
- DeleteRole_Success: remove role
- DeleteRole_NotFound: 404 for missing role
- DeleteRole_InvalidID: 400 for invalid ID
- DeleteRole_NonAdmin_Forbidden: admin-only protection
- UpdateRoleStatus_Success: enable/disable role
- UpdateRoleStatus_InvalidStatus: reject invalid status
- GetRolePermissions_Success: list role's permissions
- AssignPermissions_Success: assign permissions to role
PermissionHandler Tests:
- CreatePermission_Success: create permission with code/resource/action
- ListPermissions_Success: list all permissions
- GetPermission_Success: retrieve permission details
- GetPermission_NotFound: 404 for missing permission
- GetPermission_InvalidID: 400 for invalid ID
- UpdatePermission_Success: modify permission
- UpdatePermission_NotFound: 404 for missing permission
- DeletePermission_Success: remove permission
- DeletePermission_NotFound: 404 for missing permission
- DeletePermission_InvalidID: 400 for invalid ID
- GetPermissionTree_Success: hierarchical permission view
- UpdatePermissionStatus_Success: enable/disable permission
Coverage: RoleHandler + PermissionHandler from 0% to ~75%+
Key RBAC boundaries: admin-only access, CRUD validation, status management
0d977c6d0c