from django.db import migrations


def seed_administrations_approve(apps, schema_editor):
    Permission = apps.get_model("core", "Permission")
    Role = apps.get_model("core", "Role")

    permission, _ = Permission.objects.get_or_create(
        domain="administrations",
        action="approve",
        defaults={"label": "Administrations: Approve"},
    )
    for role in Role.objects.filter(is_system=True, slug__in=("manager", "super-admin")):
        role.permissions.add(permission)


class Migration(migrations.Migration):
    dependencies = [("core", "0017_rbac_v2_capability_expand")]
    operations = [
        migrations.RunPython(seed_administrations_approve, migrations.RunPython.noop),
    ]