Deploy files from GitHub repository

docs/docs.go

@@ -1756,58 +1756,6 @@ const docTemplate = `{
                 }
             }
         },
-        "/api/v1/admin/authentication/{account_id}/assign": {
-            "put": {
-                "security": [
-                    {
-                        "BearerAuth": []
-                    }
-                ],
-                "description": "Update the role of a user account",
-                "consumes": [
-                    "application/json"
-                ],
-                "produces": [
-                    "application/json"
-                ],
-                "tags": [
-                    "Authentication"
-                ],
-                "summary": "Update User Role",
-                "parameters": [
-                    {
-                        "type": "string",
-                        "description": "Account ID",
-                        "name": "accountId",
-                        "in": "path",
-                        "required": true
-                    },
-                    {
-                        "description": "Update User Role Request",
-                        "name": "request",
-                        "in": "body",
-                        "required": true,
-                        "schema": {
-                            "$ref": "#/definitions/dto.UpdateUserRoleRequest"
-                        }
-                    }
-                ],
-                "responses": {
-                    "200": {
-                        "description": "OK",
-                        "schema": {
-                            "$ref": "#/definitions/dto.SuccessResponse-models_Account"
-                        }
-                    },
-                    "400": {
-                        "description": "Bad Request",
-                        "schema": {
-                            "$ref": "#/definitions/dto.ErrorResponse"
-                        }
-                    }
-                }
-            }
-        },
         "/api/v1/admin/events": {
             "get": {
                 "security": [
@@ -6096,6 +6044,88 @@ const docTemplate = `{
                 }
             }
         },
+        "/api/v1/super-admin/accounts/{account_id}/role": {
+            "put": {
+                "security": [
+                    {
+                        "BearerAuth": []
+                    }
+                ],
+                "description": "Set the role and privileges of a user account. Supports system roles, named custom roles, or \"custom\" with explicit flags.",
+                "consumes": [
+                    "application/json"
+                ],
+                "produces": [
+                    "application/json"
+                ],
+                "tags": [
+                    "Super Admin Accounts"
+                ],
+                "summary": "Set User Role",
+                "parameters": [
+                    {
+                        "type": "string",
+                        "description": "Account ID",
+                        "name": "account_id",
+                        "in": "path",
+                        "required": true
+                    },
+                    {
+                        "description": "Set User Role Request",
+                        "name": "request",
+                        "in": "body",
+                        "required": true,
+                        "schema": {
+                            "$ref": "#/definitions/dto.SetUserRoleRequest"
+                        }
+                    }
+                ],
+                "responses": {
+                    "200": {
+                        "description": "OK",
+                        "schema": {
+                            "$ref": "#/definitions/dto.SuccessResponse-dto_SetUserRoleResponseData"
+                        }
+                    },
+                    "400": {
+                        "description": "Bad Request",
+                        "schema": {
+                            "$ref": "#/definitions/dto.ErrorResponse"
+                        }
+                    },
+                    "401": {
+                        "description": "Unauthorized",
+                        "schema": {
+                            "$ref": "#/definitions/dto.ErrorResponse"
+                        }
+                    },
+                    "403": {
+                        "description": "Forbidden",
+                        "schema": {
+                            "$ref": "#/definitions/dto.ErrorResponse"
+                        }
+                    },
+                    "404": {
+                        "description": "Not Found",
+                        "schema": {
+                            "$ref": "#/definitions/dto.ErrorResponse"
+                        }
+                    },
+                    "409": {
+                        "description": "Conflict",
+                        "schema": {
+                            "$ref": "#/definitions/dto.ErrorResponse"
+                        }
+                    },
+                    "422": {
+                        "description": "Unprocessable Entity",
+                        "schema": {
+                            "$ref": "#/definitions/dto.ErrorResponse"
+                        }
+                    }
+                }
+            }
+        },
         "/api/v1/super-admin/inject/probset": {
             "post": {
                 "security": [
@@ -6236,6 +6266,84 @@ const docTemplate = `{
                 }
             }
         },
+        "/api/v1/super-admin/logs": {
+            "get": {
+                "security": [
+                    {
+                        "BearerAuth": []
+                    }
+                ],
+                "description": "Get paginated audit logs with optional filters. Superadmin only.",
+                "consumes": [
+                    "application/json"
+                ],
+                "produces": [
+                    "application/json"
+                ],
+                "tags": [
+                    "Super Admin Audit"
+                ],
+                "summary": "List Audit Logs",
+                "parameters": [
+                    {
+                        "type": "integer",
+                        "description": "Page number (default 1)",
+                        "name": "page",
+                        "in": "query"
+                    },
+                    {
+                        "type": "integer",
+                        "description": "Items per page (default 10, max 50)",
+                        "name": "limit",
+                        "in": "query"
+                    },
+                    {
+                        "type": "string",
+                        "description": "Filter by action",
+                        "name": "action",
+                        "in": "query"
+                    },
+                    {
+                        "type": "string",
+                        "description": "Filter by actor account ID",
+                        "name": "actor_account_id",
+                        "in": "query"
+                    },
+                    {
+                        "type": "string",
+                        "description": "Start time (RFC3339)",
+                        "name": "from",
+                        "in": "query"
+                    },
+                    {
+                        "type": "string",
+                        "description": "End time (RFC3339)",
+                        "name": "to",
+                        "in": "query"
+                    }
+                ],
+                "responses": {
+                    "200": {
+                        "description": "OK",
+                        "schema": {
+                            "$ref": "#/definitions/dto.SuccessResponse-array_dto_AuditLogResponse"
+                        }
+                    },
+                    "401": {
+                        "description": "Unauthorized",
+                        "schema": {
+                            "$ref": "#/definitions/dto.ErrorResponse"
+                        }
+                    },
+                    "403": {
+                        "description": "Forbidden",
+                        "schema": {
+                            "$ref": "#/definitions/dto.ErrorResponse"
+                        }
+                    }
+                }
+            }
+        },
         "/api/v1/super-admin/repair/problemset/naming/migrate": {
             "post": {
                 "security": [
@@ -6345,14 +6453,14 @@ const docTemplate = `{
                 }
             }
         },
-        "/api/v1/super-admin/users": {
+        "/api/v1/super-admin/roles": {
             "get": {
                 "security": [
                     {
                         "BearerAuth": []
                     }
                 ],
-                "description": "Retrieve a paginated list of all users with optional role filter. Supports pagination parameters (page, limit) and can filter by user role.",
+                "description": "Get all system and named custom roles with their privilege flags",
                 "consumes": [
                     "application/json"
                 ],
@@ -6360,40 +6468,14 @@ const docTemplate = `{
                     "application/json"
                 ],
                 "tags": [
-                    "Super Admin Users Management"
-                ],
-                "summary": "List All Users with Pagination",
-                "parameters": [
-                    {
-                        "type": "integer",
-                        "description": "Page number for pagination. Minimum value is 1. Default is 1.",
-                        "name": "page",
-                        "in": "query"
-                    },
-                    {
-                        "type": "integer",
-                        "description": "Number of items per page. Minimum 1, Maximum 50. Default is 10.",
-                        "name": "limit",
-                        "in": "query"
-                    },
-                    {
-                        "type": "string",
-                        "description": "Filter users by role. Allowed values: user, admin, super_admin. Leave empty for no filter.",
-                        "name": "role",
-                        "in": "query"
-                    }
+                    "Super Admin Roles"
                 ],
+                "summary": "List All Roles",
                 "responses": {
                     "200": {
                         "description": "OK",
                         "schema": {
-                            "$ref": "#/definitions/dto.SuccessResponse-array_dto_UserResponse"
-                        }
-                    },
-                    "400": {
-                        "description": "Bad Request",
-                        "schema": {
-                            "$ref": "#/definitions/dto.ErrorResponse"
+                            "$ref": "#/definitions/dto.SuccessResponse-array_dto_RoleResponse"
                         }
                     },
                     "401": {
@@ -6416,7 +6498,7 @@ const docTemplate = `{
                         "BearerAuth": []
                     }
                 ],
-                "description": "Create a new user account by providing user details",
+                "description": "Create a new named custom role with privilege flags. Superadmin only.",
                 "consumes": [
                     "application/json"
                 ],
@@ -6424,17 +6506,17 @@ const docTemplate = `{
                     "application/json"
                 ],
                 "tags": [
-                    "Super Admin Users Management"
+                    "Super Admin Roles"
                 ],
-                "summary": "Create Single User",
+                "summary": "Create Named Role",
                 "parameters": [
                     {
-                        "description": "Create User Request",
+                        "description": "Create Role Request",
                         "name": "request",
                         "in": "body",
                         "required": true,
                         "schema": {
-                            "$ref": "#/definitions/dto.CreateUserRequest"
+                            "$ref": "#/definitions/dto.CreateRoleRequest"
                         }
                     }
                 ],
@@ -6442,7 +6524,7 @@ const docTemplate = `{
                     "200": {
                         "description": "OK",
                         "schema": {
-                            "$ref": "#/definitions/dto.SuccessResponse-dto_UserResponse"
+                            "$ref": "#/definitions/dto.SuccessResponse-dto_RoleResponse"
                         }
                     },
                     "400": {
@@ -6462,18 +6544,24 @@ const docTemplate = `{
                         "schema": {
                             "$ref": "#/definitions/dto.ErrorResponse"
                         }
+                    },
+                    "409": {
+                        "description": "Conflict",
+                        "schema": {
+                            "$ref": "#/definitions/dto.ErrorResponse"
+                        }
                     }
                 }
             }
         },
-        "/api/v1/super-admin/users/bulk": {
-            "post": {
+        "/api/v1/super-admin/roles/{role_id}": {
+            "put": {
                 "security": [
                     {
                         "BearerAuth": []
                     }
                 ],
-                "description": "Create multiple user accounts at once",
+                "description": "Update a named custom role's privilege flags. System roles are immutable.",
                 "consumes": [
                     "application/json"
                 ],
@@ -6481,20 +6569,24 @@ const docTemplate = `{
                     "application/json"
                 ],
                 "tags": [
-                    "Super Admin Users Management"
+                    "Super Admin Roles"
                 ],
-                "summary": "Bulk Create Users",
+                "summary": "Update Named Role",
                 "parameters": [
                     {
-                        "description": "Bulk Create User Requests",
-                        "name": "requests",
+                        "type": "string",
+                        "description": "Role ID",
+                        "name": "role_id",
+                        "in": "path",
+                        "required": true
+                    },
+                    {
+                        "description": "Update Role Request",
+                        "name": "request",
                         "in": "body",
                         "required": true,
                         "schema": {
-                            "type": "array",
-                            "items": {
-                                "$ref": "#/definitions/dto.CreateUserRequest"
-                            }
+                            "$ref": "#/definitions/dto.UpdateRoleRequest"
                         }
                     }
                 ],
@@ -6502,7 +6594,7 @@ const docTemplate = `{
                     "200": {
                         "description": "OK",
                         "schema": {
-                            "$ref": "#/definitions/dto.SuccessResponse-dto_CreateUserRequest"
+                            "$ref": "#/definitions/dto.SuccessResponse-dto_RoleResponse"
                         }
                     },
                     "400": {
@@ -6524,16 +6616,14 @@ const docTemplate = `{
                         }
                     }
                 }
-            }
-        },
-        "/api/v1/super-admin/users/{id}": {
-            "put": {
+            },
+            "delete": {
                 "security": [
                     {
                         "BearerAuth": []
                     }
                 ],
-                "description": "Update user information by ID",
+                "description": "Delete a named custom role. System roles are immutable. Cannot delete if assigned to any account.",
                 "consumes": [
                     "application/json"
                 ],
@@ -6541,13 +6631,249 @@ const docTemplate = `{
                     "application/json"
                 ],
                 "tags": [
-                    "Super Admin Users Management"
+                    "Super Admin Roles"
                 ],
-                "summary": "Edit User",
+                "summary": "Delete Named Role",
                 "parameters": [
                     {
                         "type": "string",
-                        "description": "User ID",
+                        "description": "Role ID",
+                        "name": "role_id",
+                        "in": "path",
+                        "required": true
+                    }
+                ],
+                "responses": {
+                    "200": {
+                        "description": "OK",
+                        "schema": {
+                            "$ref": "#/definitions/dto.SuccessResponse-any"
+                        }
+                    },
+                    "401": {
+                        "description": "Unauthorized",
+                        "schema": {
+                            "$ref": "#/definitions/dto.ErrorResponse"
+                        }
+                    },
+                    "403": {
+                        "description": "Forbidden",
+                        "schema": {
+                            "$ref": "#/definitions/dto.ErrorResponse"
+                        }
+                    },
+                    "409": {
+                        "description": "Conflict",
+                        "schema": {
+                            "$ref": "#/definitions/dto.ErrorResponse"
+                        }
+                    }
+                }
+            }
+        },
+        "/api/v1/super-admin/users": {
+            "get": {
+                "security": [
+                    {
+                        "BearerAuth": []
+                    }
+                ],
+                "description": "Retrieve a paginated list of all users with optional role filter. Supports pagination parameters (page, limit) and can filter by user role.",
+                "consumes": [
+                    "application/json"
+                ],
+                "produces": [
+                    "application/json"
+                ],
+                "tags": [
+                    "Super Admin Users Management"
+                ],
+                "summary": "List All Users with Pagination",
+                "parameters": [
+                    {
+                        "type": "integer",
+                        "description": "Page number for pagination. Minimum value is 1. Default is 1.",
+                        "name": "page",
+                        "in": "query"
+                    },
+                    {
+                        "type": "integer",
+                        "description": "Number of items per page. Minimum 1, Maximum 50. Default is 10.",
+                        "name": "limit",
+                        "in": "query"
+                    },
+                    {
+                        "type": "string",
+                        "description": "Filter users by role. Allowed values: user, admin, super_admin. Leave empty for no filter.",
+                        "name": "role",
+                        "in": "query"
+                    }
+                ],
+                "responses": {
+                    "200": {
+                        "description": "OK",
+                        "schema": {
+                            "$ref": "#/definitions/dto.SuccessResponse-array_dto_UserResponse"
+                        }
+                    },
+                    "400": {
+                        "description": "Bad Request",
+                        "schema": {
+                            "$ref": "#/definitions/dto.ErrorResponse"
+                        }
+                    },
+                    "401": {
+                        "description": "Unauthorized",
+                        "schema": {
+                            "$ref": "#/definitions/dto.ErrorResponse"
+                        }
+                    },
+                    "403": {
+                        "description": "Forbidden",
+                        "schema": {
+                            "$ref": "#/definitions/dto.ErrorResponse"
+                        }
+                    }
+                }
+            },
+            "post": {
+                "security": [
+                    {
+                        "BearerAuth": []
+                    }
+                ],
+                "description": "Create a new user account by providing user details",
+                "consumes": [
+                    "application/json"
+                ],
+                "produces": [
+                    "application/json"
+                ],
+                "tags": [
+                    "Super Admin Users Management"
+                ],
+                "summary": "Create Single User",
+                "parameters": [
+                    {
+                        "description": "Create User Request",
+                        "name": "request",
+                        "in": "body",
+                        "required": true,
+                        "schema": {
+                            "$ref": "#/definitions/dto.CreateUserRequest"
+                        }
+                    }
+                ],
+                "responses": {
+                    "200": {
+                        "description": "OK",
+                        "schema": {
+                            "$ref": "#/definitions/dto.SuccessResponse-dto_UserResponse"
+                        }
+                    },
+                    "400": {
+                        "description": "Bad Request",
+                        "schema": {
+                            "$ref": "#/definitions/dto.ErrorResponse"
+                        }
+                    },
+                    "401": {
+                        "description": "Unauthorized",
+                        "schema": {
+                            "$ref": "#/definitions/dto.ErrorResponse"
+                        }
+                    },
+                    "403": {
+                        "description": "Forbidden",
+                        "schema": {
+                            "$ref": "#/definitions/dto.ErrorResponse"
+                        }
+                    }
+                }
+            }
+        },
+        "/api/v1/super-admin/users/bulk": {
+            "post": {
+                "security": [
+                    {
+                        "BearerAuth": []
+                    }
+                ],
+                "description": "Create multiple user accounts at once",
+                "consumes": [
+                    "application/json"
+                ],
+                "produces": [
+                    "application/json"
+                ],
+                "tags": [
+                    "Super Admin Users Management"
+                ],
+                "summary": "Bulk Create Users",
+                "parameters": [
+                    {
+                        "description": "Bulk Create User Requests",
+                        "name": "requests",
+                        "in": "body",
+                        "required": true,
+                        "schema": {
+                            "type": "array",
+                            "items": {
+                                "$ref": "#/definitions/dto.CreateUserRequest"
+                            }
+                        }
+                    }
+                ],
+                "responses": {
+                    "200": {
+                        "description": "OK",
+                        "schema": {
+                            "$ref": "#/definitions/dto.SuccessResponse-dto_CreateUserRequest"
+                        }
+                    },
+                    "400": {
+                        "description": "Bad Request",
+                        "schema": {
+                            "$ref": "#/definitions/dto.ErrorResponse"
+                        }
+                    },
+                    "401": {
+                        "description": "Unauthorized",
+                        "schema": {
+                            "$ref": "#/definitions/dto.ErrorResponse"
+                        }
+                    },
+                    "403": {
+                        "description": "Forbidden",
+                        "schema": {
+                            "$ref": "#/definitions/dto.ErrorResponse"
+                        }
+                    }
+                }
+            }
+        },
+        "/api/v1/super-admin/users/{id}": {
+            "put": {
+                "security": [
+                    {
+                        "BearerAuth": []
+                    }
+                ],
+                "description": "Update user information by ID",
+                "consumes": [
+                    "application/json"
+                ],
+                "produces": [
+                    "application/json"
+                ],
+                "tags": [
+                    "Super Admin Users Management"
+                ],
+                "summary": "Edit User",
+                "parameters": [
+                    {
+                        "type": "string",
+                        "description": "User ID",
                         "name": "id",
                         "in": "path",
                         "required": true
@@ -7037,6 +7363,29 @@ const docTemplate = `{
                 }
             }
         },
+        "dto.AuditLogResponse": {
+            "type": "object",
+            "properties": {
+                "action": {
+                    "type": "string"
+                },
+                "actor_account_id": {
+                    "type": "string"
+                },
+                "created_at": {
+                    "type": "string"
+                },
+                "detail": {
+                    "type": "string"
+                },
+                "id": {
+                    "type": "string"
+                },
+                "target_id": {
+                    "type": "string"
+                }
+            }
+        },
         "dto.AuthenticatedUser": {
             "type": "object",
             "properties": {
@@ -7386,6 +7735,29 @@ const docTemplate = `{
                 }
             }
         },
+        "dto.CreateRoleRequest": {
+            "type": "object",
+            "required": [
+                "name"
+            ],
+            "properties": {
+                "academy_management": {
+                    "type": "boolean"
+                },
+                "content_management": {
+                    "type": "boolean"
+                },
+                "event_management": {
+                    "type": "boolean"
+                },
+                "exam_management": {
+                    "type": "boolean"
+                },
+                "name": {
+                    "type": "string"
+                }
+            }
+        },
         "dto.CreateUserRequest": {
             "type": "object",
             "required": [
@@ -7661,6 +8033,23 @@ const docTemplate = `{
                 }
             }
         },
+        "dto.Privileges": {
+            "type": "object",
+            "properties": {
+                "academy_management": {
+                    "type": "boolean"
+                },
+                "content_management": {
+                    "type": "boolean"
+                },
+                "event_management": {
+                    "type": "boolean"
+                },
+                "exam_management": {
+                    "type": "boolean"
+                }
+            }
+        },
         "dto.ProblemSetInjectResponse": {
             "type": "object",
             "properties": {
@@ -7918,6 +8307,61 @@ const docTemplate = `{
                 }
             }
         },
+        "dto.RoleResponse": {
+            "type": "object",
+            "properties": {
+                "academy_management": {
+                    "type": "boolean"
+                },
+                "content_management": {
+                    "type": "boolean"
+                },
+                "event_management": {
+                    "type": "boolean"
+                },
+                "exam_management": {
+                    "type": "boolean"
+                },
+                "id": {
+                    "type": "string"
+                },
+                "is_system": {
+                    "type": "boolean"
+                },
+                "name": {
+                    "type": "string"
+                }
+            }
+        },
+        "dto.SetUserRoleRequest": {
+            "type": "object",
+            "required": [
+                "privileges",
+                "role_name"
+            ],
+            "properties": {
+                "privileges": {
+                    "$ref": "#/definitions/dto.Privileges"
+                },
+                "role_name": {
+                    "type": "string"
+                }
+            }
+        },
+        "dto.SetUserRoleResponseData": {
+            "type": "object",
+            "properties": {
+                "account_id": {
+                    "type": "string"
+                },
+                "privileges": {
+                    "$ref": "#/definitions/dto.Privileges"
+                },
+                "role_name": {
+                    "type": "string"
+                }
+            }
+        },
         "dto.SignInRequest": {
             "type": "object",
             "required": [
@@ -7998,6 +8442,22 @@ const docTemplate = `{
                 }
             }
         },
+        "dto.SuccessResponse-array_dto_AuditLogResponse": {
+            "type": "object",
+            "properties": {
+                "data": {
+                    "type": "array",
+                    "items": {
+                        "$ref": "#/definitions/dto.AuditLogResponse"
+                    }
+                },
+                "message": {},
+                "meta_data": {},
+                "status": {
+                    "type": "string"
+                }
+            }
+        },
         "dto.SuccessResponse-array_dto_EventScoreboardItem": {
             "type": "object",
             "properties": {
@@ -8030,6 +8490,22 @@ const docTemplate = `{
                 }
             }
         },
+        "dto.SuccessResponse-array_dto_RoleResponse": {
+            "type": "object",
+            "properties": {
+                "data": {
+                    "type": "array",
+                    "items": {
+                        "$ref": "#/definitions/dto.RoleResponse"
+                    }
+                },
+                "message": {},
+                "meta_data": {},
+                "status": {
+                    "type": "string"
+                }
+            }
+        },
         "dto.SuccessResponse-array_dto_UserResponse": {
             "type": "object",
             "properties": {
@@ -8426,6 +8902,32 @@ const docTemplate = `{
                 }
             }
         },
+        "dto.SuccessResponse-dto_RoleResponse": {
+            "type": "object",
+            "properties": {
+                "data": {
+                    "$ref": "#/definitions/dto.RoleResponse"
+                },
+                "message": {},
+                "meta_data": {},
+                "status": {
+                    "type": "string"
+                }
+            }
+        },
+        "dto.SuccessResponse-dto_SetUserRoleResponseData": {
+            "type": "object",
+            "properties": {
+                "data": {
+                    "$ref": "#/definitions/dto.SetUserRoleResponseData"
+                },
+                "message": {},
+                "meta_data": {},
+                "status": {
+                    "type": "string"
+                }
+            }
+        },
         "dto.SuccessResponse-dto_UserResponse": {
             "type": "object",
             "properties": {
@@ -8801,6 +9303,26 @@ const docTemplate = `{
                 }
             }
         },
+        "dto.UpdateRoleRequest": {
+            "type": "object",
+            "properties": {
+                "academy_management": {
+                    "type": "boolean"
+                },
+                "content_management": {
+                    "type": "boolean"
+                },
+                "event_management": {
+                    "type": "boolean"
+                },
+                "exam_management": {
+                    "type": "boolean"
+                },
+                "name": {
+                    "type": "string"
+                }
+            }
+        },
         "dto.UpdateUserRequest": {
             "type": "object",
             "properties": {
@@ -8818,17 +9340,6 @@ const docTemplate = `{
                 }
             }
         },
-        "dto.UpdateUserRoleRequest": {
-            "type": "object",
-            "required": [
-                "role"
-            ],
-            "properties": {
-                "role": {
-                    "type": "string"
-                }
-            }
-        },
         "dto.UserResponse": {
             "type": "object",
             "properties": {
@@ -9255,12 +9766,24 @@ const docTemplate = `{
         "models.Account": {
             "type": "object",
             "properties": {
+                "academy_management": {
+                    "type": "boolean"
+                },
+                "content_management": {
+                    "type": "boolean"
+                },
                 "created_at": {
                     "type": "string"
                 },
                 "email": {
                     "type": "string"
                 },
+                "event_management": {
+                    "type": "boolean"
+                },
+                "exam_management": {
+                    "type": "boolean"
+                },
                 "full_name": {
                     "type": "string"
                 },
@@ -9276,6 +9799,15 @@ const docTemplate = `{
                 "role": {
                     "type": "string"
                 },
+                "role_id": {
+                    "type": "string"
+                },
+                "role_name": {
+                    "type": "string"
+                },
+                "token_version": {
+                    "type": "integer"
+                },
                 "username": {
                     "type": "string"
                 }

docs/swagger.json

@@ -1745,58 +1745,6 @@
                 }
             }
         },
-        "/api/v1/admin/authentication/{account_id}/assign": {
-            "put": {
-                "security": [
-                    {
-                        "BearerAuth": []
-                    }
-                ],
-                "description": "Update the role of a user account",
-                "consumes": [
-                    "application/json"
-                ],
-                "produces": [
-                    "application/json"
-                ],
-                "tags": [
-                    "Authentication"
-                ],
-                "summary": "Update User Role",
-                "parameters": [
-                    {
-                        "type": "string",
-                        "description": "Account ID",
-                        "name": "accountId",
-                        "in": "path",
-                        "required": true
-                    },
-                    {
-                        "description": "Update User Role Request",
-                        "name": "request",
-                        "in": "body",
-                        "required": true,
-                        "schema": {
-                            "$ref": "#/definitions/dto.UpdateUserRoleRequest"
-                        }
-                    }
-                ],
-                "responses": {
-                    "200": {
-                        "description": "OK",
-                        "schema": {
-                            "$ref": "#/definitions/dto.SuccessResponse-models_Account"
-                        }
-                    },
-                    "400": {
-                        "description": "Bad Request",
-                        "schema": {
-                            "$ref": "#/definitions/dto.ErrorResponse"
-                        }
-                    }
-                }
-            }
-        },
         "/api/v1/admin/events": {
             "get": {
                 "security": [
@@ -6085,6 +6033,88 @@
                 }
             }
         },
+        "/api/v1/super-admin/accounts/{account_id}/role": {
+            "put": {
+                "security": [
+                    {
+                        "BearerAuth": []
+                    }
+                ],
+                "description": "Set the role and privileges of a user account. Supports system roles, named custom roles, or \"custom\" with explicit flags.",
+                "consumes": [
+                    "application/json"
+                ],
+                "produces": [
+                    "application/json"
+                ],
+                "tags": [
+                    "Super Admin Accounts"
+                ],
+                "summary": "Set User Role",
+                "parameters": [
+                    {
+                        "type": "string",
+                        "description": "Account ID",
+                        "name": "account_id",
+                        "in": "path",
+                        "required": true
+                    },
+                    {
+                        "description": "Set User Role Request",
+                        "name": "request",
+                        "in": "body",
+                        "required": true,
+                        "schema": {
+                            "$ref": "#/definitions/dto.SetUserRoleRequest"
+                        }
+                    }
+                ],
+                "responses": {
+                    "200": {
+                        "description": "OK",
+                        "schema": {
+                            "$ref": "#/definitions/dto.SuccessResponse-dto_SetUserRoleResponseData"
+                        }
+                    },
+                    "400": {
+                        "description": "Bad Request",
+                        "schema": {
+                            "$ref": "#/definitions/dto.ErrorResponse"
+                        }
+                    },
+                    "401": {
+                        "description": "Unauthorized",
+                        "schema": {
+                            "$ref": "#/definitions/dto.ErrorResponse"
+                        }
+                    },
+                    "403": {
+                        "description": "Forbidden",
+                        "schema": {
+                            "$ref": "#/definitions/dto.ErrorResponse"
+                        }
+                    },
+                    "404": {
+                        "description": "Not Found",
+                        "schema": {
+                            "$ref": "#/definitions/dto.ErrorResponse"
+                        }
+                    },
+                    "409": {
+                        "description": "Conflict",
+                        "schema": {
+                            "$ref": "#/definitions/dto.ErrorResponse"
+                        }
+                    },
+                    "422": {
+                        "description": "Unprocessable Entity",
+                        "schema": {
+                            "$ref": "#/definitions/dto.ErrorResponse"
+                        }
+                    }
+                }
+            }
+        },
         "/api/v1/super-admin/inject/probset": {
             "post": {
                 "security": [
@@ -6225,6 +6255,84 @@
                 }
             }
         },
+        "/api/v1/super-admin/logs": {
+            "get": {
+                "security": [
+                    {
+                        "BearerAuth": []
+                    }
+                ],
+                "description": "Get paginated audit logs with optional filters. Superadmin only.",
+                "consumes": [
+                    "application/json"
+                ],
+                "produces": [
+                    "application/json"
+                ],
+                "tags": [
+                    "Super Admin Audit"
+                ],
+                "summary": "List Audit Logs",
+                "parameters": [
+                    {
+                        "type": "integer",
+                        "description": "Page number (default 1)",
+                        "name": "page",
+                        "in": "query"
+                    },
+                    {
+                        "type": "integer",
+                        "description": "Items per page (default 10, max 50)",
+                        "name": "limit",
+                        "in": "query"
+                    },
+                    {
+                        "type": "string",
+                        "description": "Filter by action",
+                        "name": "action",
+                        "in": "query"
+                    },
+                    {
+                        "type": "string",
+                        "description": "Filter by actor account ID",
+                        "name": "actor_account_id",
+                        "in": "query"
+                    },
+                    {
+                        "type": "string",
+                        "description": "Start time (RFC3339)",
+                        "name": "from",
+                        "in": "query"
+                    },
+                    {
+                        "type": "string",
+                        "description": "End time (RFC3339)",
+                        "name": "to",
+                        "in": "query"
+                    }
+                ],
+                "responses": {
+                    "200": {
+                        "description": "OK",
+                        "schema": {
+                            "$ref": "#/definitions/dto.SuccessResponse-array_dto_AuditLogResponse"
+                        }
+                    },
+                    "401": {
+                        "description": "Unauthorized",
+                        "schema": {
+                            "$ref": "#/definitions/dto.ErrorResponse"
+                        }
+                    },
+                    "403": {
+                        "description": "Forbidden",
+                        "schema": {
+                            "$ref": "#/definitions/dto.ErrorResponse"
+                        }
+                    }
+                }
+            }
+        },
         "/api/v1/super-admin/repair/problemset/naming/migrate": {
             "post": {
                 "security": [
@@ -6334,14 +6442,14 @@
                 }
             }
         },
-        "/api/v1/super-admin/users": {
+        "/api/v1/super-admin/roles": {
             "get": {
                 "security": [
                     {
                         "BearerAuth": []
                     }
                 ],
-                "description": "Retrieve a paginated list of all users with optional role filter. Supports pagination parameters (page, limit) and can filter by user role.",
+                "description": "Get all system and named custom roles with their privilege flags",
                 "consumes": [
                     "application/json"
                 ],
@@ -6349,40 +6457,14 @@
                     "application/json"
                 ],
                 "tags": [
-                    "Super Admin Users Management"
-                ],
-                "summary": "List All Users with Pagination",
-                "parameters": [
-                    {
-                        "type": "integer",
-                        "description": "Page number for pagination. Minimum value is 1. Default is 1.",
-                        "name": "page",
-                        "in": "query"
-                    },
-                    {
-                        "type": "integer",
-                        "description": "Number of items per page. Minimum 1, Maximum 50. Default is 10.",
-                        "name": "limit",
-                        "in": "query"
-                    },
-                    {
-                        "type": "string",
-                        "description": "Filter users by role. Allowed values: user, admin, super_admin. Leave empty for no filter.",
-                        "name": "role",
-                        "in": "query"
-                    }
+                    "Super Admin Roles"
                 ],
+                "summary": "List All Roles",
                 "responses": {
                     "200": {
                         "description": "OK",
                         "schema": {
-                            "$ref": "#/definitions/dto.SuccessResponse-array_dto_UserResponse"
-                        }
-                    },
-                    "400": {
-                        "description": "Bad Request",
-                        "schema": {
-                            "$ref": "#/definitions/dto.ErrorResponse"
+                            "$ref": "#/definitions/dto.SuccessResponse-array_dto_RoleResponse"
                         }
                     },
                     "401": {
@@ -6405,7 +6487,7 @@
                         "BearerAuth": []
                     }
                 ],
-                "description": "Create a new user account by providing user details",
+                "description": "Create a new named custom role with privilege flags. Superadmin only.",
                 "consumes": [
                     "application/json"
                 ],
@@ -6413,17 +6495,17 @@
                     "application/json"
                 ],
                 "tags": [
-                    "Super Admin Users Management"
+                    "Super Admin Roles"
                 ],
-                "summary": "Create Single User",
+                "summary": "Create Named Role",
                 "parameters": [
                     {
-                        "description": "Create User Request",
+                        "description": "Create Role Request",
                         "name": "request",
                         "in": "body",
                         "required": true,
                         "schema": {
-                            "$ref": "#/definitions/dto.CreateUserRequest"
+                            "$ref": "#/definitions/dto.CreateRoleRequest"
                         }
                     }
                 ],
@@ -6431,7 +6513,7 @@
                     "200": {
                         "description": "OK",
                         "schema": {
-                            "$ref": "#/definitions/dto.SuccessResponse-dto_UserResponse"
+                            "$ref": "#/definitions/dto.SuccessResponse-dto_RoleResponse"
                         }
                     },
                     "400": {
@@ -6451,18 +6533,24 @@
                         "schema": {
                             "$ref": "#/definitions/dto.ErrorResponse"
                         }
+                    },
+                    "409": {
+                        "description": "Conflict",
+                        "schema": {
+                            "$ref": "#/definitions/dto.ErrorResponse"
+                        }
                     }
                 }
             }
         },
-        "/api/v1/super-admin/users/bulk": {
-            "post": {
+        "/api/v1/super-admin/roles/{role_id}": {
+            "put": {
                 "security": [
                     {
                         "BearerAuth": []
                     }
                 ],
-                "description": "Create multiple user accounts at once",
+                "description": "Update a named custom role's privilege flags. System roles are immutable.",
                 "consumes": [
                     "application/json"
                 ],
@@ -6470,20 +6558,24 @@
                     "application/json"
                 ],
                 "tags": [
-                    "Super Admin Users Management"
+                    "Super Admin Roles"
                 ],
-                "summary": "Bulk Create Users",
+                "summary": "Update Named Role",
                 "parameters": [
                     {
-                        "description": "Bulk Create User Requests",
-                        "name": "requests",
+                        "type": "string",
+                        "description": "Role ID",
+                        "name": "role_id",
+                        "in": "path",
+                        "required": true
+                    },
+                    {
+                        "description": "Update Role Request",
+                        "name": "request",
                         "in": "body",
                         "required": true,
                         "schema": {
-                            "type": "array",
-                            "items": {
-                                "$ref": "#/definitions/dto.CreateUserRequest"
-                            }
+                            "$ref": "#/definitions/dto.UpdateRoleRequest"
                         }
                     }
                 ],
@@ -6491,7 +6583,7 @@
                     "200": {
                         "description": "OK",
                         "schema": {
-                            "$ref": "#/definitions/dto.SuccessResponse-dto_CreateUserRequest"
+                            "$ref": "#/definitions/dto.SuccessResponse-dto_RoleResponse"
                         }
                     },
                     "400": {
@@ -6513,16 +6605,14 @@
                         }
                     }
                 }
-            }
-        },
-        "/api/v1/super-admin/users/{id}": {
-            "put": {
+            },
+            "delete": {
                 "security": [
                     {
                         "BearerAuth": []
                     }
                 ],
-                "description": "Update user information by ID",
+                "description": "Delete a named custom role. System roles are immutable. Cannot delete if assigned to any account.",
                 "consumes": [
                     "application/json"
                 ],
@@ -6530,13 +6620,249 @@
                     "application/json"
                 ],
                 "tags": [
-                    "Super Admin Users Management"
+                    "Super Admin Roles"
                 ],
-                "summary": "Edit User",
+                "summary": "Delete Named Role",
                 "parameters": [
                     {
                         "type": "string",
-                        "description": "User ID",
+                        "description": "Role ID",
+                        "name": "role_id",
+                        "in": "path",
+                        "required": true
+                    }
+                ],
+                "responses": {
+                    "200": {
+                        "description": "OK",
+                        "schema": {
+                            "$ref": "#/definitions/dto.SuccessResponse-any"
+                        }
+                    },
+                    "401": {
+                        "description": "Unauthorized",
+                        "schema": {
+                            "$ref": "#/definitions/dto.ErrorResponse"
+                        }
+                    },
+                    "403": {
+                        "description": "Forbidden",
+                        "schema": {
+                            "$ref": "#/definitions/dto.ErrorResponse"
+                        }
+                    },
+                    "409": {
+                        "description": "Conflict",
+                        "schema": {
+                            "$ref": "#/definitions/dto.ErrorResponse"
+                        }
+                    }
+                }
+            }
+        },
+        "/api/v1/super-admin/users": {
+            "get": {
+                "security": [
+                    {
+                        "BearerAuth": []
+                    }
+                ],
+                "description": "Retrieve a paginated list of all users with optional role filter. Supports pagination parameters (page, limit) and can filter by user role.",
+                "consumes": [
+                    "application/json"
+                ],
+                "produces": [
+                    "application/json"
+                ],
+                "tags": [
+                    "Super Admin Users Management"
+                ],
+                "summary": "List All Users with Pagination",
+                "parameters": [
+                    {
+                        "type": "integer",
+                        "description": "Page number for pagination. Minimum value is 1. Default is 1.",
+                        "name": "page",
+                        "in": "query"
+                    },
+                    {
+                        "type": "integer",
+                        "description": "Number of items per page. Minimum 1, Maximum 50. Default is 10.",
+                        "name": "limit",
+                        "in": "query"
+                    },
+                    {
+                        "type": "string",
+                        "description": "Filter users by role. Allowed values: user, admin, super_admin. Leave empty for no filter.",
+                        "name": "role",
+                        "in": "query"
+                    }
+                ],
+                "responses": {
+                    "200": {
+                        "description": "OK",
+                        "schema": {
+                            "$ref": "#/definitions/dto.SuccessResponse-array_dto_UserResponse"
+                        }
+                    },
+                    "400": {
+                        "description": "Bad Request",
+                        "schema": {
+                            "$ref": "#/definitions/dto.ErrorResponse"
+                        }
+                    },
+                    "401": {
+                        "description": "Unauthorized",
+                        "schema": {
+                            "$ref": "#/definitions/dto.ErrorResponse"
+                        }
+                    },
+                    "403": {
+                        "description": "Forbidden",
+                        "schema": {
+                            "$ref": "#/definitions/dto.ErrorResponse"
+                        }
+                    }
+                }
+            },
+            "post": {
+                "security": [
+                    {
+                        "BearerAuth": []
+                    }
+                ],
+                "description": "Create a new user account by providing user details",
+                "consumes": [
+                    "application/json"
+                ],
+                "produces": [
+                    "application/json"
+                ],
+                "tags": [
+                    "Super Admin Users Management"
+                ],
+                "summary": "Create Single User",
+                "parameters": [
+                    {
+                        "description": "Create User Request",
+                        "name": "request",
+                        "in": "body",
+                        "required": true,
+                        "schema": {
+                            "$ref": "#/definitions/dto.CreateUserRequest"
+                        }
+                    }
+                ],
+                "responses": {
+                    "200": {
+                        "description": "OK",
+                        "schema": {
+                            "$ref": "#/definitions/dto.SuccessResponse-dto_UserResponse"
+                        }
+                    },
+                    "400": {
+                        "description": "Bad Request",
+                        "schema": {
+                            "$ref": "#/definitions/dto.ErrorResponse"
+                        }
+                    },
+                    "401": {
+                        "description": "Unauthorized",
+                        "schema": {
+                            "$ref": "#/definitions/dto.ErrorResponse"
+                        }
+                    },
+                    "403": {
+                        "description": "Forbidden",
+                        "schema": {
+                            "$ref": "#/definitions/dto.ErrorResponse"
+                        }
+                    }
+                }
+            }
+        },
+        "/api/v1/super-admin/users/bulk": {
+            "post": {
+                "security": [
+                    {
+                        "BearerAuth": []
+                    }
+                ],
+                "description": "Create multiple user accounts at once",
+                "consumes": [
+                    "application/json"
+                ],
+                "produces": [
+                    "application/json"
+                ],
+                "tags": [
+                    "Super Admin Users Management"
+                ],
+                "summary": "Bulk Create Users",
+                "parameters": [
+                    {
+                        "description": "Bulk Create User Requests",
+                        "name": "requests",
+                        "in": "body",
+                        "required": true,
+                        "schema": {
+                            "type": "array",
+                            "items": {
+                                "$ref": "#/definitions/dto.CreateUserRequest"
+                            }
+                        }
+                    }
+                ],
+                "responses": {
+                    "200": {
+                        "description": "OK",
+                        "schema": {
+                            "$ref": "#/definitions/dto.SuccessResponse-dto_CreateUserRequest"
+                        }
+                    },
+                    "400": {
+                        "description": "Bad Request",
+                        "schema": {
+                            "$ref": "#/definitions/dto.ErrorResponse"
+                        }
+                    },
+                    "401": {
+                        "description": "Unauthorized",
+                        "schema": {
+                            "$ref": "#/definitions/dto.ErrorResponse"
+                        }
+                    },
+                    "403": {
+                        "description": "Forbidden",
+                        "schema": {
+                            "$ref": "#/definitions/dto.ErrorResponse"
+                        }
+                    }
+                }
+            }
+        },
+        "/api/v1/super-admin/users/{id}": {
+            "put": {
+                "security": [
+                    {
+                        "BearerAuth": []
+                    }
+                ],
+                "description": "Update user information by ID",
+                "consumes": [
+                    "application/json"
+                ],
+                "produces": [
+                    "application/json"
+                ],
+                "tags": [
+                    "Super Admin Users Management"
+                ],
+                "summary": "Edit User",
+                "parameters": [
+                    {
+                        "type": "string",
+                        "description": "User ID",
                         "name": "id",
                         "in": "path",
                         "required": true
@@ -7026,6 +7352,29 @@
                 }
             }
         },
+        "dto.AuditLogResponse": {
+            "type": "object",
+            "properties": {
+                "action": {
+                    "type": "string"
+                },
+                "actor_account_id": {
+                    "type": "string"
+                },
+                "created_at": {
+                    "type": "string"
+                },
+                "detail": {
+                    "type": "string"
+                },
+                "id": {
+                    "type": "string"
+                },
+                "target_id": {
+                    "type": "string"
+                }
+            }
+        },
         "dto.AuthenticatedUser": {
             "type": "object",
             "properties": {
@@ -7375,6 +7724,29 @@
                 }
             }
         },
+        "dto.CreateRoleRequest": {
+            "type": "object",
+            "required": [
+                "name"
+            ],
+            "properties": {
+                "academy_management": {
+                    "type": "boolean"
+                },
+                "content_management": {
+                    "type": "boolean"
+                },
+                "event_management": {
+                    "type": "boolean"
+                },
+                "exam_management": {
+                    "type": "boolean"
+                },
+                "name": {
+                    "type": "string"
+                }
+            }
+        },
         "dto.CreateUserRequest": {
             "type": "object",
             "required": [
@@ -7650,6 +8022,23 @@
                 }
             }
         },
+        "dto.Privileges": {
+            "type": "object",
+            "properties": {
+                "academy_management": {
+                    "type": "boolean"
+                },
+                "content_management": {
+                    "type": "boolean"
+                },
+                "event_management": {
+                    "type": "boolean"
+                },
+                "exam_management": {
+                    "type": "boolean"
+                }
+            }
+        },
         "dto.ProblemSetInjectResponse": {
             "type": "object",
             "properties": {
@@ -7907,6 +8296,61 @@
                 }
             }
         },
+        "dto.RoleResponse": {
+            "type": "object",
+            "properties": {
+                "academy_management": {
+                    "type": "boolean"
+                },
+                "content_management": {
+                    "type": "boolean"
+                },
+                "event_management": {
+                    "type": "boolean"
+                },
+                "exam_management": {
+                    "type": "boolean"
+                },
+                "id": {
+                    "type": "string"
+                },
+                "is_system": {
+                    "type": "boolean"
+                },
+                "name": {
+                    "type": "string"
+                }
+            }
+        },
+        "dto.SetUserRoleRequest": {
+            "type": "object",
+            "required": [
+                "privileges",
+                "role_name"
+            ],
+            "properties": {
+                "privileges": {
+                    "$ref": "#/definitions/dto.Privileges"
+                },
+                "role_name": {
+                    "type": "string"
+                }
+            }
+        },
+        "dto.SetUserRoleResponseData": {
+            "type": "object",
+            "properties": {
+                "account_id": {
+                    "type": "string"
+                },
+                "privileges": {
+                    "$ref": "#/definitions/dto.Privileges"
+                },
+                "role_name": {
+                    "type": "string"
+                }
+            }
+        },
         "dto.SignInRequest": {
             "type": "object",
             "required": [
@@ -7987,6 +8431,22 @@
                 }
             }
         },
+        "dto.SuccessResponse-array_dto_AuditLogResponse": {
+            "type": "object",
+            "properties": {
+                "data": {
+                    "type": "array",
+                    "items": {
+                        "$ref": "#/definitions/dto.AuditLogResponse"
+                    }
+                },
+                "message": {},
+                "meta_data": {},
+                "status": {
+                    "type": "string"
+                }
+            }
+        },
         "dto.SuccessResponse-array_dto_EventScoreboardItem": {
             "type": "object",
             "properties": {
@@ -8019,6 +8479,22 @@
                 }
             }
         },
+        "dto.SuccessResponse-array_dto_RoleResponse": {
+            "type": "object",
+            "properties": {
+                "data": {
+                    "type": "array",
+                    "items": {
+                        "$ref": "#/definitions/dto.RoleResponse"
+                    }
+                },
+                "message": {},
+                "meta_data": {},
+                "status": {
+                    "type": "string"
+                }
+            }
+        },
         "dto.SuccessResponse-array_dto_UserResponse": {
             "type": "object",
             "properties": {
@@ -8415,6 +8891,32 @@
                 }
             }
         },
+        "dto.SuccessResponse-dto_RoleResponse": {
+            "type": "object",
+            "properties": {
+                "data": {
+                    "$ref": "#/definitions/dto.RoleResponse"
+                },
+                "message": {},
+                "meta_data": {},
+                "status": {
+                    "type": "string"
+                }
+            }
+        },
+        "dto.SuccessResponse-dto_SetUserRoleResponseData": {
+            "type": "object",
+            "properties": {
+                "data": {
+                    "$ref": "#/definitions/dto.SetUserRoleResponseData"
+                },
+                "message": {},
+                "meta_data": {},
+                "status": {
+                    "type": "string"
+                }
+            }
+        },
         "dto.SuccessResponse-dto_UserResponse": {
             "type": "object",
             "properties": {
@@ -8790,6 +9292,26 @@
                 }
             }
         },
+        "dto.UpdateRoleRequest": {
+            "type": "object",
+            "properties": {
+                "academy_management": {
+                    "type": "boolean"
+                },
+                "content_management": {
+                    "type": "boolean"
+                },
+                "event_management": {
+                    "type": "boolean"
+                },
+                "exam_management": {
+                    "type": "boolean"
+                },
+                "name": {
+                    "type": "string"
+                }
+            }
+        },
         "dto.UpdateUserRequest": {
             "type": "object",
             "properties": {
@@ -8807,17 +9329,6 @@
                 }
             }
         },
-        "dto.UpdateUserRoleRequest": {
-            "type": "object",
-            "required": [
-                "role"
-            ],
-            "properties": {
-                "role": {
-                    "type": "string"
-                }
-            }
-        },
         "dto.UserResponse": {
             "type": "object",
             "properties": {
@@ -9244,12 +9755,24 @@
         "models.Account": {
             "type": "object",
             "properties": {
+                "academy_management": {
+                    "type": "boolean"
+                },
+                "content_management": {
+                    "type": "boolean"
+                },
                 "created_at": {
                     "type": "string"
                 },
                 "email": {
                     "type": "string"
                 },
+                "event_management": {
+                    "type": "boolean"
+                },
+                "exam_management": {
+                    "type": "boolean"
+                },
                 "full_name": {
                     "type": "string"
                 },
@@ -9265,6 +9788,15 @@
                 "role": {
                     "type": "string"
                 },
+                "role_id": {
+                    "type": "string"
+                },
+                "role_name": {
+                    "type": "string"
+                },
+                "token_version": {
+                    "type": "integer"
+                },
                 "username": {
                     "type": "string"
                 }

docs/swagger.yaml

@@ -249,6 +249,21 @@ definitions:
       account_id:
         type: string
     type: object
+  dto.AuditLogResponse:
+    properties:
+      action:
+        type: string
+      actor_account_id:
+        type: string
+      created_at:
+        type: string
+      detail:
+        type: string
+      id:
+        type: string
+      target_id:
+        type: string
+    type: object
   dto.AuthenticatedUser:
     properties:
       account:
@@ -480,6 +495,21 @@ definitions:
     - question
     - type
     type: object
+  dto.CreateRoleRequest:
+    properties:
+      academy_management:
+        type: boolean
+      content_management:
+        type: boolean
+      event_management:
+        type: boolean
+      exam_management:
+        type: boolean
+      name:
+        type: string
+    required:
+    - name
+    type: object
   dto.CreateUserRequest:
     properties:
       email:
@@ -661,6 +691,17 @@ definitions:
     - option_name
     - option_values
     type: object
+  dto.Privileges:
+    properties:
+      academy_management:
+        type: boolean
+      content_management:
+        type: boolean
+      event_management:
+        type: boolean
+      exam_management:
+        type: boolean
+    type: object
   dto.ProblemSetInjectResponse:
     properties:
       file:
@@ -828,6 +869,42 @@ definitions:
     required:
     - question_ids
     type: object
+  dto.RoleResponse:
+    properties:
+      academy_management:
+        type: boolean
+      content_management:
+        type: boolean
+      event_management:
+        type: boolean
+      exam_management:
+        type: boolean
+      id:
+        type: string
+      is_system:
+        type: boolean
+      name:
+        type: string
+    type: object
+  dto.SetUserRoleRequest:
+    properties:
+      privileges:
+        $ref: '#/definitions/dto.Privileges'
+      role_name:
+        type: string
+    required:
+    - privileges
+    - role_name
+    type: object
+  dto.SetUserRoleResponseData:
+    properties:
+      account_id:
+        type: string
+      privileges:
+        $ref: '#/definitions/dto.Privileges'
+      role_name:
+        type: string
+    type: object
   dto.SignInRequest:
     properties:
       email_or_username:
@@ -883,6 +960,17 @@ definitions:
       status:
         type: string
     type: object
+  dto.SuccessResponse-array_dto_AuditLogResponse:
+    properties:
+      data:
+        items:
+          $ref: '#/definitions/dto.AuditLogResponse'
+        type: array
+      message: {}
+      meta_data: {}
+      status:
+        type: string
+    type: object
   dto.SuccessResponse-array_dto_EventScoreboardItem:
     properties:
       data:
@@ -905,6 +993,17 @@ definitions:
       status:
         type: string
     type: object
+  dto.SuccessResponse-array_dto_RoleResponse:
+    properties:
+      data:
+        items:
+          $ref: '#/definitions/dto.RoleResponse'
+        type: array
+      message: {}
+      meta_data: {}
+      status:
+        type: string
+    type: object
   dto.SuccessResponse-array_dto_UserResponse:
     properties:
       data:
@@ -1178,6 +1277,24 @@ definitions:
       status:
         type: string
     type: object
+  dto.SuccessResponse-dto_RoleResponse:
+    properties:
+      data:
+        $ref: '#/definitions/dto.RoleResponse'
+      message: {}
+      meta_data: {}
+      status:
+        type: string
+    type: object
+  dto.SuccessResponse-dto_SetUserRoleResponseData:
+    properties:
+      data:
+        $ref: '#/definitions/dto.SetUserRoleResponseData'
+      message: {}
+      meta_data: {}
+      status:
+        type: string
+    type: object
   dto.SuccessResponse-dto_UserResponse:
     properties:
       data:
@@ -1431,6 +1548,19 @@ definitions:
     required:
     - final_score
     type: object
+  dto.UpdateRoleRequest:
+    properties:
+      academy_management:
+        type: boolean
+      content_management:
+        type: boolean
+      event_management:
+        type: boolean
+      exam_management:
+        type: boolean
+      name:
+        type: string
+    type: object
   dto.UpdateUserRequest:
     properties:
       email:
@@ -1442,13 +1572,6 @@ definitions:
       username:
         type: string
     type: object
-  dto.UpdateUserRoleRequest:
-    properties:
-      role:
-        type: string
-    required:
-    - role
-    type: object
   dto.UserResponse:
     properties:
       created_at: {}
@@ -1729,10 +1852,18 @@ definitions:
     type: object
   models.Account:
     properties:
+      academy_management:
+        type: boolean
+      content_management:
+        type: boolean
       created_at:
         type: string
       email:
         type: string
+      event_management:
+        type: boolean
+      exam_management:
+        type: boolean
       full_name:
         type: string
       id:
@@ -1743,6 +1874,12 @@ definitions:
         type: boolean
       role:
         type: string
+      role_id:
+        type: string
+      role_name:
+        type: string
+      token_version:
+        type: integer
       username:
         type: string
     type: object
@@ -3204,39 +3341,6 @@ paths:
       summary: 'Admin: List Academy Participants'
       tags:
       - Admin Academy
-  /api/v1/admin/authentication/{account_id}/assign:
-    put:
-      consumes:
-      - application/json
-      description: Update the role of a user account
-      parameters:
-      - description: Account ID
-        in: path
-        name: accountId
-        required: true
-        type: string
-      - description: Update User Role Request
-        in: body
-        name: request
-        required: true
-        schema:
-          $ref: '#/definitions/dto.UpdateUserRoleRequest'
-      produces:
-      - application/json
-      responses:
-        "200":
-          description: OK
-          schema:
-            $ref: '#/definitions/dto.SuccessResponse-models_Account'
-        "400":
-          description: Bad Request
-          schema:
-            $ref: '#/definitions/dto.ErrorResponse'
-      security:
-      - BearerAuth: []
-      summary: Update User Role
-      tags:
-      - Authentication
   /api/v1/admin/events:
     get:
       consumes:
@@ -6039,6 +6143,60 @@ paths:
       summary: Seed Provinces
       tags:
       - Region
+  /api/v1/super-admin/accounts/{account_id}/role:
+    put:
+      consumes:
+      - application/json
+      description: Set the role and privileges of a user account. Supports system
+        roles, named custom roles, or "custom" with explicit flags.
+      parameters:
+      - description: Account ID
+        in: path
+        name: account_id
+        required: true
+        type: string
+      - description: Set User Role Request
+        in: body
+        name: request
+        required: true
+        schema:
+          $ref: '#/definitions/dto.SetUserRoleRequest'
+      produces:
+      - application/json
+      responses:
+        "200":
+          description: OK
+          schema:
+            $ref: '#/definitions/dto.SuccessResponse-dto_SetUserRoleResponseData'
+        "400":
+          description: Bad Request
+          schema:
+            $ref: '#/definitions/dto.ErrorResponse'
+        "401":
+          description: Unauthorized
+          schema:
+            $ref: '#/definitions/dto.ErrorResponse'
+        "403":
+          description: Forbidden
+          schema:
+            $ref: '#/definitions/dto.ErrorResponse'
+        "404":
+          description: Not Found
+          schema:
+            $ref: '#/definitions/dto.ErrorResponse'
+        "409":
+          description: Conflict
+          schema:
+            $ref: '#/definitions/dto.ErrorResponse'
+        "422":
+          description: Unprocessable Entity
+          schema:
+            $ref: '#/definitions/dto.ErrorResponse'
+      security:
+      - BearerAuth: []
+      summary: Set User Role
+      tags:
+      - Super Admin Accounts
   /api/v1/super-admin/inject/probset:
     post:
       consumes:
@@ -6130,6 +6288,56 @@ paths:
       summary: 'Super Admin: Inject Zip to Storage'
       tags:
       - Super Admin Inject
+  /api/v1/super-admin/logs:
+    get:
+      consumes:
+      - application/json
+      description: Get paginated audit logs with optional filters. Superadmin only.
+      parameters:
+      - description: Page number (default 1)
+        in: query
+        name: page
+        type: integer
+      - description: Items per page (default 10, max 50)
+        in: query
+        name: limit
+        type: integer
+      - description: Filter by action
+        in: query
+        name: action
+        type: string
+      - description: Filter by actor account ID
+        in: query
+        name: actor_account_id
+        type: string
+      - description: Start time (RFC3339)
+        in: query
+        name: from
+        type: string
+      - description: End time (RFC3339)
+        in: query
+        name: to
+        type: string
+      produces:
+      - application/json
+      responses:
+        "200":
+          description: OK
+          schema:
+            $ref: '#/definitions/dto.SuccessResponse-array_dto_AuditLogResponse'
+        "401":
+          description: Unauthorized
+          schema:
+            $ref: '#/definitions/dto.ErrorResponse'
+        "403":
+          description: Forbidden
+          schema:
+            $ref: '#/definitions/dto.ErrorResponse'
+      security:
+      - BearerAuth: []
+      summary: List Audit Logs
+      tags:
+      - Super Admin Audit
   /api/v1/super-admin/repair/problemset/naming/migrate:
     post:
       consumes:
@@ -6201,6 +6409,148 @@ paths:
       summary: 'Super Admin: Repair Question Storage Path'
       tags:
       - Super Admin Repair
+  /api/v1/super-admin/roles:
+    get:
+      consumes:
+      - application/json
+      description: Get all system and named custom roles with their privilege flags
+      produces:
+      - application/json
+      responses:
+        "200":
+          description: OK
+          schema:
+            $ref: '#/definitions/dto.SuccessResponse-array_dto_RoleResponse'
+        "401":
+          description: Unauthorized
+          schema:
+            $ref: '#/definitions/dto.ErrorResponse'
+        "403":
+          description: Forbidden
+          schema:
+            $ref: '#/definitions/dto.ErrorResponse'
+      security:
+      - BearerAuth: []
+      summary: List All Roles
+      tags:
+      - Super Admin Roles
+    post:
+      consumes:
+      - application/json
+      description: Create a new named custom role with privilege flags. Superadmin
+        only.
+      parameters:
+      - description: Create Role Request
+        in: body
+        name: request
+        required: true
+        schema:
+          $ref: '#/definitions/dto.CreateRoleRequest'
+      produces:
+      - application/json
+      responses:
+        "200":
+          description: OK
+          schema:
+            $ref: '#/definitions/dto.SuccessResponse-dto_RoleResponse'
+        "400":
+          description: Bad Request
+          schema:
+            $ref: '#/definitions/dto.ErrorResponse'
+        "401":
+          description: Unauthorized
+          schema:
+            $ref: '#/definitions/dto.ErrorResponse'
+        "403":
+          description: Forbidden
+          schema:
+            $ref: '#/definitions/dto.ErrorResponse'
+        "409":
+          description: Conflict
+          schema:
+            $ref: '#/definitions/dto.ErrorResponse'
+      security:
+      - BearerAuth: []
+      summary: Create Named Role
+      tags:
+      - Super Admin Roles
+  /api/v1/super-admin/roles/{role_id}:
+    delete:
+      consumes:
+      - application/json
+      description: Delete a named custom role. System roles are immutable. Cannot
+        delete if assigned to any account.
+      parameters:
+      - description: Role ID
+        in: path
+        name: role_id
+        required: true
+        type: string
+      produces:
+      - application/json
+      responses:
+        "200":
+          description: OK
+          schema:
+            $ref: '#/definitions/dto.SuccessResponse-any'
+        "401":
+          description: Unauthorized
+          schema:
+            $ref: '#/definitions/dto.ErrorResponse'
+        "403":
+          description: Forbidden
+          schema:
+            $ref: '#/definitions/dto.ErrorResponse'
+        "409":
+          description: Conflict
+          schema:
+            $ref: '#/definitions/dto.ErrorResponse'
+      security:
+      - BearerAuth: []
+      summary: Delete Named Role
+      tags:
+      - Super Admin Roles
+    put:
+      consumes:
+      - application/json
+      description: Update a named custom role's privilege flags. System roles are
+        immutable.
+      parameters:
+      - description: Role ID
+        in: path
+        name: role_id
+        required: true
+        type: string
+      - description: Update Role Request
+        in: body
+        name: request
+        required: true
+        schema:
+          $ref: '#/definitions/dto.UpdateRoleRequest'
+      produces:
+      - application/json
+      responses:
+        "200":
+          description: OK
+          schema:
+            $ref: '#/definitions/dto.SuccessResponse-dto_RoleResponse'
+        "400":
+          description: Bad Request
+          schema:
+            $ref: '#/definitions/dto.ErrorResponse'
+        "401":
+          description: Unauthorized
+          schema:
+            $ref: '#/definitions/dto.ErrorResponse'
+        "403":
+          description: Forbidden
+          schema:
+            $ref: '#/definitions/dto.ErrorResponse'
+      security:
+      - BearerAuth: []
+      summary: Update Named Role
+      tags:
+      - Super Admin Roles
   /api/v1/super-admin/users:
     get:
       consumes:

swagger/docs/docs.go

@@ -1763,58 +1763,6 @@ const docTemplate = `{
                 }
             }
         },
-        "/api/v1/admin/authentication/{account_id}/assign": {
-            "put": {
-                "security": [
-                    {
-                        "BearerAuth": []
-                    }
-                ],
-                "description": "Update the role of a user account",
-                "consumes": [
-                    "application/json"
-                ],
-                "produces": [
-                    "application/json"
-                ],
-                "tags": [
-                    "Authentication"
-                ],
-                "summary": "Update User Role",
-                "parameters": [
-                    {
-                        "type": "string",
-                        "description": "Account ID",
-                        "name": "accountId",
-                        "in": "path",
-                        "required": true
-                    },
-                    {
-                        "description": "Update User Role Request",
-                        "name": "request",
-                        "in": "body",
-                        "required": true,
-                        "schema": {
-                            "$ref": "#/definitions/dto.UpdateUserRoleRequest"
-                        }
-                    }
-                ],
-                "responses": {
-                    "200": {
-                        "description": "OK",
-                        "schema": {
-                            "$ref": "#/definitions/dto.SuccessResponse-models_Account"
-                        }
-                    },
-                    "400": {
-                        "description": "Bad Request",
-                        "schema": {
-                            "$ref": "#/definitions/dto.ErrorResponse"
-                        }
-                    }
-                }
-            }
-        },
         "/api/v1/admin/events": {
             "get": {
                 "security": [
@@ -6103,6 +6051,88 @@ const docTemplate = `{
                 }
             }
         },
+        "/api/v1/super-admin/accounts/{account_id}/role": {
+            "put": {
+                "security": [
+                    {
+                        "BearerAuth": []
+                    }
+                ],
+                "description": "Set the role and privileges of a user account. Supports system roles, named custom roles, or \"custom\" with explicit flags.",
+                "consumes": [
+                    "application/json"
+                ],
+                "produces": [
+                    "application/json"
+                ],
+                "tags": [
+                    "Super Admin Accounts"
+                ],
+                "summary": "Set User Role",
+                "parameters": [
+                    {
+                        "type": "string",
+                        "description": "Account ID",
+                        "name": "account_id",
+                        "in": "path",
+                        "required": true
+                    },
+                    {
+                        "description": "Set User Role Request",
+                        "name": "request",
+                        "in": "body",
+                        "required": true,
+                        "schema": {
+                            "$ref": "#/definitions/dto.SetUserRoleRequest"
+                        }
+                    }
+                ],
+                "responses": {
+                    "200": {
+                        "description": "OK",
+                        "schema": {
+                            "$ref": "#/definitions/dto.SuccessResponse-dto_SetUserRoleResponseData"
+                        }
+                    },
+                    "400": {
+                        "description": "Bad Request",
+                        "schema": {
+                            "$ref": "#/definitions/dto.ErrorResponse"
+                        }
+                    },
+                    "401": {
+                        "description": "Unauthorized",
+                        "schema": {
+                            "$ref": "#/definitions/dto.ErrorResponse"
+                        }
+                    },
+                    "403": {
+                        "description": "Forbidden",
+                        "schema": {
+                            "$ref": "#/definitions/dto.ErrorResponse"
+                        }
+                    },
+                    "404": {
+                        "description": "Not Found",
+                        "schema": {
+                            "$ref": "#/definitions/dto.ErrorResponse"
+                        }
+                    },
+                    "409": {
+                        "description": "Conflict",
+                        "schema": {
+                            "$ref": "#/definitions/dto.ErrorResponse"
+                        }
+                    },
+                    "422": {
+                        "description": "Unprocessable Entity",
+                        "schema": {
+                            "$ref": "#/definitions/dto.ErrorResponse"
+                        }
+                    }
+                }
+            }
+        },
         "/api/v1/super-admin/inject/probset": {
             "post": {
                 "security": [
@@ -6243,6 +6273,84 @@ const docTemplate = `{
                 }
             }
         },
+        "/api/v1/super-admin/logs": {
+            "get": {
+                "security": [
+                    {
+                        "BearerAuth": []
+                    }
+                ],
+                "description": "Get paginated audit logs with optional filters. Superadmin only.",
+                "consumes": [
+                    "application/json"
+                ],
+                "produces": [
+                    "application/json"
+                ],
+                "tags": [
+                    "Super Admin Audit"
+                ],
+                "summary": "List Audit Logs",
+                "parameters": [
+                    {
+                        "type": "integer",
+                        "description": "Page number (default 1)",
+                        "name": "page",
+                        "in": "query"
+                    },
+                    {
+                        "type": "integer",
+                        "description": "Items per page (default 10, max 50)",
+                        "name": "limit",
+                        "in": "query"
+                    },
+                    {
+                        "type": "string",
+                        "description": "Filter by action",
+                        "name": "action",
+                        "in": "query"
+                    },
+                    {
+                        "type": "string",
+                        "description": "Filter by actor account ID",
+                        "name": "actor_account_id",
+                        "in": "query"
+                    },
+                    {
+                        "type": "string",
+                        "description": "Start time (RFC3339)",
+                        "name": "from",
+                        "in": "query"
+                    },
+                    {
+                        "type": "string",
+                        "description": "End time (RFC3339)",
+                        "name": "to",
+                        "in": "query"
+                    }
+                ],
+                "responses": {
+                    "200": {
+                        "description": "OK",
+                        "schema": {
+                            "$ref": "#/definitions/dto.SuccessResponse-array_dto_AuditLogResponse"
+                        }
+                    },
+                    "401": {
+                        "description": "Unauthorized",
+                        "schema": {
+                            "$ref": "#/definitions/dto.ErrorResponse"
+                        }
+                    },
+                    "403": {
+                        "description": "Forbidden",
+                        "schema": {
+                            "$ref": "#/definitions/dto.ErrorResponse"
+                        }
+                    }
+                }
+            }
+        },
         "/api/v1/super-admin/repair/problemset/naming/migrate": {
             "post": {
                 "security": [
@@ -6352,14 +6460,14 @@ const docTemplate = `{
                 }
             }
         },
-        "/api/v1/super-admin/users": {
+        "/api/v1/super-admin/roles": {
             "get": {
                 "security": [
                     {
                         "BearerAuth": []
                     }
                 ],
-                "description": "Retrieve a paginated list of all users with optional role filter. Supports pagination parameters (page, limit) and can filter by user role.",
+                "description": "Get all system and named custom roles with their privilege flags",
                 "consumes": [
                     "application/json"
                 ],
@@ -6367,40 +6475,14 @@ const docTemplate = `{
                     "application/json"
                 ],
                 "tags": [
-                    "Super Admin Users Management"
-                ],
-                "summary": "List All Users with Pagination",
-                "parameters": [
-                    {
-                        "type": "integer",
-                        "description": "Page number for pagination. Minimum value is 1. Default is 1.",
-                        "name": "page",
-                        "in": "query"
-                    },
-                    {
-                        "type": "integer",
-                        "description": "Number of items per page. Minimum 1, Maximum 50. Default is 10.",
-                        "name": "limit",
-                        "in": "query"
-                    },
-                    {
-                        "type": "string",
-                        "description": "Filter users by role. Allowed values: user, admin, super_admin. Leave empty for no filter.",
-                        "name": "role",
-                        "in": "query"
-                    }
+                    "Super Admin Roles"
                 ],
+                "summary": "List All Roles",
                 "responses": {
                     "200": {
                         "description": "OK",
                         "schema": {
-                            "$ref": "#/definitions/dto.SuccessResponse-array_dto_UserResponse"
-                        }
-                    },
-                    "400": {
-                        "description": "Bad Request",
-                        "schema": {
-                            "$ref": "#/definitions/dto.ErrorResponse"
+                            "$ref": "#/definitions/dto.SuccessResponse-array_dto_RoleResponse"
                         }
                     },
                     "401": {
@@ -6423,7 +6505,7 @@ const docTemplate = `{
                         "BearerAuth": []
                     }
                 ],
-                "description": "Create a new user account by providing user details",
+                "description": "Create a new named custom role with privilege flags. Superadmin only.",
                 "consumes": [
                     "application/json"
                 ],
@@ -6431,17 +6513,17 @@ const docTemplate = `{
                     "application/json"
                 ],
                 "tags": [
-                    "Super Admin Users Management"
+                    "Super Admin Roles"
                 ],
-                "summary": "Create Single User",
+                "summary": "Create Named Role",
                 "parameters": [
                     {
-                        "description": "Create User Request",
+                        "description": "Create Role Request",
                         "name": "request",
                         "in": "body",
                         "required": true,
                         "schema": {
-                            "$ref": "#/definitions/dto.CreateUserRequest"
+                            "$ref": "#/definitions/dto.CreateRoleRequest"
                         }
                     }
                 ],
@@ -6449,7 +6531,7 @@ const docTemplate = `{
                     "200": {
                         "description": "OK",
                         "schema": {
-                            "$ref": "#/definitions/dto.SuccessResponse-dto_UserResponse"
+                            "$ref": "#/definitions/dto.SuccessResponse-dto_RoleResponse"
                         }
                     },
                     "400": {
@@ -6469,18 +6551,24 @@ const docTemplate = `{
                         "schema": {
                             "$ref": "#/definitions/dto.ErrorResponse"
                         }
+                    },
+                    "409": {
+                        "description": "Conflict",
+                        "schema": {
+                            "$ref": "#/definitions/dto.ErrorResponse"
+                        }
                     }
                 }
             }
         },
-        "/api/v1/super-admin/users/bulk": {
-            "post": {
+        "/api/v1/super-admin/roles/{role_id}": {
+            "put": {
                 "security": [
                     {
                         "BearerAuth": []
                     }
                 ],
-                "description": "Create multiple user accounts at once",
+                "description": "Update a named custom role's privilege flags. System roles are immutable.",
                 "consumes": [
                     "application/json"
                 ],
@@ -6488,20 +6576,24 @@ const docTemplate = `{
                     "application/json"
                 ],
                 "tags": [
-                    "Super Admin Users Management"
+                    "Super Admin Roles"
                 ],
-                "summary": "Bulk Create Users",
+                "summary": "Update Named Role",
                 "parameters": [
                     {
-                        "description": "Bulk Create User Requests",
-                        "name": "requests",
+                        "type": "string",
+                        "description": "Role ID",
+                        "name": "role_id",
+                        "in": "path",
+                        "required": true
+                    },
+                    {
+                        "description": "Update Role Request",
+                        "name": "request",
                         "in": "body",
                         "required": true,
                         "schema": {
-                            "type": "array",
-                            "items": {
-                                "$ref": "#/definitions/dto.CreateUserRequest"
-                            }
+                            "$ref": "#/definitions/dto.UpdateRoleRequest"
                         }
                     }
                 ],
@@ -6509,7 +6601,7 @@ const docTemplate = `{
                     "200": {
                         "description": "OK",
                         "schema": {
-                            "$ref": "#/definitions/dto.SuccessResponse-dto_CreateUserRequest"
+                            "$ref": "#/definitions/dto.SuccessResponse-dto_RoleResponse"
                         }
                     },
                     "400": {
@@ -6531,16 +6623,14 @@ const docTemplate = `{
                         }
                     }
                 }
-            }
-        },
-        "/api/v1/super-admin/users/{id}": {
-            "put": {
+            },
+            "delete": {
                 "security": [
                     {
                         "BearerAuth": []
                     }
                 ],
-                "description": "Update user information by ID",
+                "description": "Delete a named custom role. System roles are immutable. Cannot delete if assigned to any account.",
                 "consumes": [
                     "application/json"
                 ],
@@ -6548,13 +6638,249 @@ const docTemplate = `{
                     "application/json"
                 ],
                 "tags": [
-                    "Super Admin Users Management"
+                    "Super Admin Roles"
                 ],
-                "summary": "Edit User",
+                "summary": "Delete Named Role",
                 "parameters": [
                     {
                         "type": "string",
-                        "description": "User ID",
+                        "description": "Role ID",
+                        "name": "role_id",
+                        "in": "path",
+                        "required": true
+                    }
+                ],
+                "responses": {
+                    "200": {
+                        "description": "OK",
+                        "schema": {
+                            "$ref": "#/definitions/dto.SuccessResponse-any"
+                        }
+                    },
+                    "401": {
+                        "description": "Unauthorized",
+                        "schema": {
+                            "$ref": "#/definitions/dto.ErrorResponse"
+                        }
+                    },
+                    "403": {
+                        "description": "Forbidden",
+                        "schema": {
+                            "$ref": "#/definitions/dto.ErrorResponse"
+                        }
+                    },
+                    "409": {
+                        "description": "Conflict",
+                        "schema": {
+                            "$ref": "#/definitions/dto.ErrorResponse"
+                        }
+                    }
+                }
+            }
+        },
+        "/api/v1/super-admin/users": {
+            "get": {
+                "security": [
+                    {
+                        "BearerAuth": []
+                    }
+                ],
+                "description": "Retrieve a paginated list of all users with optional role filter. Supports pagination parameters (page, limit) and can filter by user role.",
+                "consumes": [
+                    "application/json"
+                ],
+                "produces": [
+                    "application/json"
+                ],
+                "tags": [
+                    "Super Admin Users Management"
+                ],
+                "summary": "List All Users with Pagination",
+                "parameters": [
+                    {
+                        "type": "integer",
+                        "description": "Page number for pagination. Minimum value is 1. Default is 1.",
+                        "name": "page",
+                        "in": "query"
+                    },
+                    {
+                        "type": "integer",
+                        "description": "Number of items per page. Minimum 1, Maximum 50. Default is 10.",
+                        "name": "limit",
+                        "in": "query"
+                    },
+                    {
+                        "type": "string",
+                        "description": "Filter users by role. Allowed values: user, admin, super_admin. Leave empty for no filter.",
+                        "name": "role",
+                        "in": "query"
+                    }
+                ],
+                "responses": {
+                    "200": {
+                        "description": "OK",
+                        "schema": {
+                            "$ref": "#/definitions/dto.SuccessResponse-array_dto_UserResponse"
+                        }
+                    },
+                    "400": {
+                        "description": "Bad Request",
+                        "schema": {
+                            "$ref": "#/definitions/dto.ErrorResponse"
+                        }
+                    },
+                    "401": {
+                        "description": "Unauthorized",
+                        "schema": {
+                            "$ref": "#/definitions/dto.ErrorResponse"
+                        }
+                    },
+                    "403": {
+                        "description": "Forbidden",
+                        "schema": {
+                            "$ref": "#/definitions/dto.ErrorResponse"
+                        }
+                    }
+                }
+            },
+            "post": {
+                "security": [
+                    {
+                        "BearerAuth": []
+                    }
+                ],
+                "description": "Create a new user account by providing user details",
+                "consumes": [
+                    "application/json"
+                ],
+                "produces": [
+                    "application/json"
+                ],
+                "tags": [
+                    "Super Admin Users Management"
+                ],
+                "summary": "Create Single User",
+                "parameters": [
+                    {
+                        "description": "Create User Request",
+                        "name": "request",
+                        "in": "body",
+                        "required": true,
+                        "schema": {
+                            "$ref": "#/definitions/dto.CreateUserRequest"
+                        }
+                    }
+                ],
+                "responses": {
+                    "200": {
+                        "description": "OK",
+                        "schema": {
+                            "$ref": "#/definitions/dto.SuccessResponse-dto_UserResponse"
+                        }
+                    },
+                    "400": {
+                        "description": "Bad Request",
+                        "schema": {
+                            "$ref": "#/definitions/dto.ErrorResponse"
+                        }
+                    },
+                    "401": {
+                        "description": "Unauthorized",
+                        "schema": {
+                            "$ref": "#/definitions/dto.ErrorResponse"
+                        }
+                    },
+                    "403": {
+                        "description": "Forbidden",
+                        "schema": {
+                            "$ref": "#/definitions/dto.ErrorResponse"
+                        }
+                    }
+                }
+            }
+        },
+        "/api/v1/super-admin/users/bulk": {
+            "post": {
+                "security": [
+                    {
+                        "BearerAuth": []
+                    }
+                ],
+                "description": "Create multiple user accounts at once",
+                "consumes": [
+                    "application/json"
+                ],
+                "produces": [
+                    "application/json"
+                ],
+                "tags": [
+                    "Super Admin Users Management"
+                ],
+                "summary": "Bulk Create Users",
+                "parameters": [
+                    {
+                        "description": "Bulk Create User Requests",
+                        "name": "requests",
+                        "in": "body",
+                        "required": true,
+                        "schema": {
+                            "type": "array",
+                            "items": {
+                                "$ref": "#/definitions/dto.CreateUserRequest"
+                            }
+                        }
+                    }
+                ],
+                "responses": {
+                    "200": {
+                        "description": "OK",
+                        "schema": {
+                            "$ref": "#/definitions/dto.SuccessResponse-dto_CreateUserRequest"
+                        }
+                    },
+                    "400": {
+                        "description": "Bad Request",
+                        "schema": {
+                            "$ref": "#/definitions/dto.ErrorResponse"
+                        }
+                    },
+                    "401": {
+                        "description": "Unauthorized",
+                        "schema": {
+                            "$ref": "#/definitions/dto.ErrorResponse"
+                        }
+                    },
+                    "403": {
+                        "description": "Forbidden",
+                        "schema": {
+                            "$ref": "#/definitions/dto.ErrorResponse"
+                        }
+                    }
+                }
+            }
+        },
+        "/api/v1/super-admin/users/{id}": {
+            "put": {
+                "security": [
+                    {
+                        "BearerAuth": []
+                    }
+                ],
+                "description": "Update user information by ID",
+                "consumes": [
+                    "application/json"
+                ],
+                "produces": [
+                    "application/json"
+                ],
+                "tags": [
+                    "Super Admin Users Management"
+                ],
+                "summary": "Edit User",
+                "parameters": [
+                    {
+                        "type": "string",
+                        "description": "User ID",
                         "name": "id",
                         "in": "path",
                         "required": true
@@ -7044,6 +7370,29 @@ const docTemplate = `{
                 }
             }
         },
+        "dto.AuditLogResponse": {
+            "type": "object",
+            "properties": {
+                "action": {
+                    "type": "string"
+                },
+                "actor_account_id": {
+                    "type": "string"
+                },
+                "created_at": {
+                    "type": "string"
+                },
+                "detail": {
+                    "type": "string"
+                },
+                "id": {
+                    "type": "string"
+                },
+                "target_id": {
+                    "type": "string"
+                }
+            }
+        },
         "dto.AuthenticatedUser": {
             "type": "object",
             "properties": {
@@ -7393,6 +7742,29 @@ const docTemplate = `{
                 }
             }
         },
+        "dto.CreateRoleRequest": {
+            "type": "object",
+            "required": [
+                "name"
+            ],
+            "properties": {
+                "academy_management": {
+                    "type": "boolean"
+                },
+                "content_management": {
+                    "type": "boolean"
+                },
+                "event_management": {
+                    "type": "boolean"
+                },
+                "exam_management": {
+                    "type": "boolean"
+                },
+                "name": {
+                    "type": "string"
+                }
+            }
+        },
         "dto.CreateUserRequest": {
             "type": "object",
             "required": [
@@ -7668,6 +8040,23 @@ const docTemplate = `{
                 }
             }
         },
+        "dto.Privileges": {
+            "type": "object",
+            "properties": {
+                "academy_management": {
+                    "type": "boolean"
+                },
+                "content_management": {
+                    "type": "boolean"
+                },
+                "event_management": {
+                    "type": "boolean"
+                },
+                "exam_management": {
+                    "type": "boolean"
+                }
+            }
+        },
         "dto.ProblemSetInjectResponse": {
             "type": "object",
             "properties": {
@@ -7925,6 +8314,61 @@ const docTemplate = `{
                 }
             }
         },
+        "dto.RoleResponse": {
+            "type": "object",
+            "properties": {
+                "academy_management": {
+                    "type": "boolean"
+                },
+                "content_management": {
+                    "type": "boolean"
+                },
+                "event_management": {
+                    "type": "boolean"
+                },
+                "exam_management": {
+                    "type": "boolean"
+                },
+                "id": {
+                    "type": "string"
+                },
+                "is_system": {
+                    "type": "boolean"
+                },
+                "name": {
+                    "type": "string"
+                }
+            }
+        },
+        "dto.SetUserRoleRequest": {
+            "type": "object",
+            "required": [
+                "privileges",
+                "role_name"
+            ],
+            "properties": {
+                "privileges": {
+                    "$ref": "#/definitions/dto.Privileges"
+                },
+                "role_name": {
+                    "type": "string"
+                }
+            }
+        },
+        "dto.SetUserRoleResponseData": {
+            "type": "object",
+            "properties": {
+                "account_id": {
+                    "type": "string"
+                },
+                "privileges": {
+                    "$ref": "#/definitions/dto.Privileges"
+                },
+                "role_name": {
+                    "type": "string"
+                }
+            }
+        },
         "dto.SignInRequest": {
             "type": "object",
             "required": [
@@ -8005,6 +8449,22 @@ const docTemplate = `{
                 }
             }
         },
+        "dto.SuccessResponse-array_dto_AuditLogResponse": {
+            "type": "object",
+            "properties": {
+                "data": {
+                    "type": "array",
+                    "items": {
+                        "$ref": "#/definitions/dto.AuditLogResponse"
+                    }
+                },
+                "message": {},
+                "meta_data": {},
+                "status": {
+                    "type": "string"
+                }
+            }
+        },
         "dto.SuccessResponse-array_dto_EventScoreboardItem": {
             "type": "object",
             "properties": {
@@ -8037,6 +8497,22 @@ const docTemplate = `{
                 }
             }
         },
+        "dto.SuccessResponse-array_dto_RoleResponse": {
+            "type": "object",
+            "properties": {
+                "data": {
+                    "type": "array",
+                    "items": {
+                        "$ref": "#/definitions/dto.RoleResponse"
+                    }
+                },
+                "message": {},
+                "meta_data": {},
+                "status": {
+                    "type": "string"
+                }
+            }
+        },
         "dto.SuccessResponse-array_dto_UserResponse": {
             "type": "object",
             "properties": {
@@ -8433,6 +8909,32 @@ const docTemplate = `{
                 }
             }
         },
+        "dto.SuccessResponse-dto_RoleResponse": {
+            "type": "object",
+            "properties": {
+                "data": {
+                    "$ref": "#/definitions/dto.RoleResponse"
+                },
+                "message": {},
+                "meta_data": {},
+                "status": {
+                    "type": "string"
+                }
+            }
+        },
+        "dto.SuccessResponse-dto_SetUserRoleResponseData": {
+            "type": "object",
+            "properties": {
+                "data": {
+                    "$ref": "#/definitions/dto.SetUserRoleResponseData"
+                },
+                "message": {},
+                "meta_data": {},
+                "status": {
+                    "type": "string"
+                }
+            }
+        },
         "dto.SuccessResponse-dto_UserResponse": {
             "type": "object",
             "properties": {
@@ -8808,6 +9310,26 @@ const docTemplate = `{
                 }
             }
         },
+        "dto.UpdateRoleRequest": {
+            "type": "object",
+            "properties": {
+                "academy_management": {
+                    "type": "boolean"
+                },
+                "content_management": {
+                    "type": "boolean"
+                },
+                "event_management": {
+                    "type": "boolean"
+                },
+                "exam_management": {
+                    "type": "boolean"
+                },
+                "name": {
+                    "type": "string"
+                }
+            }
+        },
         "dto.UpdateUserRequest": {
             "type": "object",
             "properties": {
@@ -8825,17 +9347,6 @@ const docTemplate = `{
                 }
             }
         },
-        "dto.UpdateUserRoleRequest": {
-            "type": "object",
-            "required": [
-                "role"
-            ],
-            "properties": {
-                "role": {
-                    "type": "string"
-                }
-            }
-        },
         "dto.UserResponse": {
             "type": "object",
             "properties": {
@@ -9262,12 +9773,24 @@ const docTemplate = `{
         "models.Account": {
             "type": "object",
             "properties": {
+                "academy_management": {
+                    "type": "boolean"
+                },
+                "content_management": {
+                    "type": "boolean"
+                },
                 "created_at": {
                     "type": "string"
                 },
                 "email": {
                     "type": "string"
                 },
+                "event_management": {
+                    "type": "boolean"
+                },
+                "exam_management": {
+                    "type": "boolean"
+                },
                 "full_name": {
                     "type": "string"
                 },
@@ -9283,6 +9806,15 @@ const docTemplate = `{
                 "role": {
                     "type": "string"
                 },
+                "role_id": {
+                    "type": "string"
+                },
+                "role_name": {
+                    "type": "string"
+                },
+                "token_version": {
+                    "type": "integer"
+                },
                 "username": {
                     "type": "string"
                 }

swagger/docs/swagger.json

@@ -1760,58 +1760,6 @@
                 }
             }
         },
-        "/api/v1/admin/authentication/{account_id}/assign": {
-            "put": {
-                "security": [
-                    {
-                        "BearerAuth": []
-                    }
-                ],
-                "description": "Update the role of a user account",
-                "consumes": [
-                    "application/json"
-                ],
-                "produces": [
-                    "application/json"
-                ],
-                "tags": [
-                    "Authentication"
-                ],
-                "summary": "Update User Role",
-                "parameters": [
-                    {
-                        "type": "string",
-                        "description": "Account ID",
-                        "name": "accountId",
-                        "in": "path",
-                        "required": true
-                    },
-                    {
-                        "description": "Update User Role Request",
-                        "name": "request",
-                        "in": "body",
-                        "required": true,
-                        "schema": {
-                            "$ref": "#/definitions/dto.UpdateUserRoleRequest"
-                        }
-                    }
-                ],
-                "responses": {
-                    "200": {
-                        "description": "OK",
-                        "schema": {
-                            "$ref": "#/definitions/dto.SuccessResponse-models_Account"
-                        }
-                    },
-                    "400": {
-                        "description": "Bad Request",
-                        "schema": {
-                            "$ref": "#/definitions/dto.ErrorResponse"
-                        }
-                    }
-                }
-            }
-        },
         "/api/v1/admin/events": {
             "get": {
                 "security": [
@@ -6100,6 +6048,88 @@
                 }
             }
         },
+        "/api/v1/super-admin/accounts/{account_id}/role": {
+            "put": {
+                "security": [
+                    {
+                        "BearerAuth": []
+                    }
+                ],
+                "description": "Set the role and privileges of a user account. Supports system roles, named custom roles, or \"custom\" with explicit flags.",
+                "consumes": [
+                    "application/json"
+                ],
+                "produces": [
+                    "application/json"
+                ],
+                "tags": [
+                    "Super Admin Accounts"
+                ],
+                "summary": "Set User Role",
+                "parameters": [
+                    {
+                        "type": "string",
+                        "description": "Account ID",
+                        "name": "account_id",
+                        "in": "path",
+                        "required": true
+                    },
+                    {
+                        "description": "Set User Role Request",
+                        "name": "request",
+                        "in": "body",
+                        "required": true,
+                        "schema": {
+                            "$ref": "#/definitions/dto.SetUserRoleRequest"
+                        }
+                    }
+                ],
+                "responses": {
+                    "200": {
+                        "description": "OK",
+                        "schema": {
+                            "$ref": "#/definitions/dto.SuccessResponse-dto_SetUserRoleResponseData"
+                        }
+                    },
+                    "400": {
+                        "description": "Bad Request",
+                        "schema": {
+                            "$ref": "#/definitions/dto.ErrorResponse"
+                        }
+                    },
+                    "401": {
+                        "description": "Unauthorized",
+                        "schema": {
+                            "$ref": "#/definitions/dto.ErrorResponse"
+                        }
+                    },
+                    "403": {
+                        "description": "Forbidden",
+                        "schema": {
+                            "$ref": "#/definitions/dto.ErrorResponse"
+                        }
+                    },
+                    "404": {
+                        "description": "Not Found",
+                        "schema": {
+                            "$ref": "#/definitions/dto.ErrorResponse"
+                        }
+                    },
+                    "409": {
+                        "description": "Conflict",
+                        "schema": {
+                            "$ref": "#/definitions/dto.ErrorResponse"
+                        }
+                    },
+                    "422": {
+                        "description": "Unprocessable Entity",
+                        "schema": {
+                            "$ref": "#/definitions/dto.ErrorResponse"
+                        }
+                    }
+                }
+            }
+        },
         "/api/v1/super-admin/inject/probset": {
             "post": {
                 "security": [
@@ -6240,6 +6270,84 @@
                 }
             }
         },
+        "/api/v1/super-admin/logs": {
+            "get": {
+                "security": [
+                    {
+                        "BearerAuth": []
+                    }
+                ],
+                "description": "Get paginated audit logs with optional filters. Superadmin only.",
+                "consumes": [
+                    "application/json"
+                ],
+                "produces": [
+                    "application/json"
+                ],
+                "tags": [
+                    "Super Admin Audit"
+                ],
+                "summary": "List Audit Logs",
+                "parameters": [
+                    {
+                        "type": "integer",
+                        "description": "Page number (default 1)",
+                        "name": "page",
+                        "in": "query"
+                    },
+                    {
+                        "type": "integer",
+                        "description": "Items per page (default 10, max 50)",
+                        "name": "limit",
+                        "in": "query"
+                    },
+                    {
+                        "type": "string",
+                        "description": "Filter by action",
+                        "name": "action",
+                        "in": "query"
+                    },
+                    {
+                        "type": "string",
+                        "description": "Filter by actor account ID",
+                        "name": "actor_account_id",
+                        "in": "query"
+                    },
+                    {
+                        "type": "string",
+                        "description": "Start time (RFC3339)",
+                        "name": "from",
+                        "in": "query"
+                    },
+                    {
+                        "type": "string",
+                        "description": "End time (RFC3339)",
+                        "name": "to",
+                        "in": "query"
+                    }
+                ],
+                "responses": {
+                    "200": {
+                        "description": "OK",
+                        "schema": {
+                            "$ref": "#/definitions/dto.SuccessResponse-array_dto_AuditLogResponse"
+                        }
+                    },
+                    "401": {
+                        "description": "Unauthorized",
+                        "schema": {
+                            "$ref": "#/definitions/dto.ErrorResponse"
+                        }
+                    },
+                    "403": {
+                        "description": "Forbidden",
+                        "schema": {
+                            "$ref": "#/definitions/dto.ErrorResponse"
+                        }
+                    }
+                }
+            }
+        },
         "/api/v1/super-admin/repair/problemset/naming/migrate": {
             "post": {
                 "security": [
@@ -6349,14 +6457,14 @@
                 }
             }
         },
-        "/api/v1/super-admin/users": {
+        "/api/v1/super-admin/roles": {
             "get": {
                 "security": [
                     {
                         "BearerAuth": []
                     }
                 ],
-                "description": "Retrieve a paginated list of all users with optional role filter. Supports pagination parameters (page, limit) and can filter by user role.",
+                "description": "Get all system and named custom roles with their privilege flags",
                 "consumes": [
                     "application/json"
                 ],
@@ -6364,40 +6472,14 @@
                     "application/json"
                 ],
                 "tags": [
-                    "Super Admin Users Management"
-                ],
-                "summary": "List All Users with Pagination",
-                "parameters": [
-                    {
-                        "type": "integer",
-                        "description": "Page number for pagination. Minimum value is 1. Default is 1.",
-                        "name": "page",
-                        "in": "query"
-                    },
-                    {
-                        "type": "integer",
-                        "description": "Number of items per page. Minimum 1, Maximum 50. Default is 10.",
-                        "name": "limit",
-                        "in": "query"
-                    },
-                    {
-                        "type": "string",
-                        "description": "Filter users by role. Allowed values: user, admin, super_admin. Leave empty for no filter.",
-                        "name": "role",
-                        "in": "query"
-                    }
+                    "Super Admin Roles"
                 ],
+                "summary": "List All Roles",
                 "responses": {
                     "200": {
                         "description": "OK",
                         "schema": {
-                            "$ref": "#/definitions/dto.SuccessResponse-array_dto_UserResponse"
-                        }
-                    },
-                    "400": {
-                        "description": "Bad Request",
-                        "schema": {
-                            "$ref": "#/definitions/dto.ErrorResponse"
+                            "$ref": "#/definitions/dto.SuccessResponse-array_dto_RoleResponse"
                         }
                     },
                     "401": {
@@ -6420,7 +6502,7 @@
                         "BearerAuth": []
                     }
                 ],
-                "description": "Create a new user account by providing user details",
+                "description": "Create a new named custom role with privilege flags. Superadmin only.",
                 "consumes": [
                     "application/json"
                 ],
@@ -6428,17 +6510,17 @@
                     "application/json"
                 ],
                 "tags": [
-                    "Super Admin Users Management"
+                    "Super Admin Roles"
                 ],
-                "summary": "Create Single User",
+                "summary": "Create Named Role",
                 "parameters": [
                     {
-                        "description": "Create User Request",
+                        "description": "Create Role Request",
                         "name": "request",
                         "in": "body",
                         "required": true,
                         "schema": {
-                            "$ref": "#/definitions/dto.CreateUserRequest"
+                            "$ref": "#/definitions/dto.CreateRoleRequest"
                         }
                     }
                 ],
@@ -6446,7 +6528,7 @@
                     "200": {
                         "description": "OK",
                         "schema": {
-                            "$ref": "#/definitions/dto.SuccessResponse-dto_UserResponse"
+                            "$ref": "#/definitions/dto.SuccessResponse-dto_RoleResponse"
                         }
                     },
                     "400": {
@@ -6466,18 +6548,24 @@
                         "schema": {
                             "$ref": "#/definitions/dto.ErrorResponse"
                         }
+                    },
+                    "409": {
+                        "description": "Conflict",
+                        "schema": {
+                            "$ref": "#/definitions/dto.ErrorResponse"
+                        }
                     }
                 }
             }
         },
-        "/api/v1/super-admin/users/bulk": {
-            "post": {
+        "/api/v1/super-admin/roles/{role_id}": {
+            "put": {
                 "security": [
                     {
                         "BearerAuth": []
                     }
                 ],
-                "description": "Create multiple user accounts at once",
+                "description": "Update a named custom role's privilege flags. System roles are immutable.",
                 "consumes": [
                     "application/json"
                 ],
@@ -6485,20 +6573,24 @@
                     "application/json"
                 ],
                 "tags": [
-                    "Super Admin Users Management"
+                    "Super Admin Roles"
                 ],
-                "summary": "Bulk Create Users",
+                "summary": "Update Named Role",
                 "parameters": [
                     {
-                        "description": "Bulk Create User Requests",
-                        "name": "requests",
+                        "type": "string",
+                        "description": "Role ID",
+                        "name": "role_id",
+                        "in": "path",
+                        "required": true
+                    },
+                    {
+                        "description": "Update Role Request",
+                        "name": "request",
                         "in": "body",
                         "required": true,
                         "schema": {
-                            "type": "array",
-                            "items": {
-                                "$ref": "#/definitions/dto.CreateUserRequest"
-                            }
+                            "$ref": "#/definitions/dto.UpdateRoleRequest"
                         }
                     }
                 ],
@@ -6506,7 +6598,7 @@
                     "200": {
                         "description": "OK",
                         "schema": {
-                            "$ref": "#/definitions/dto.SuccessResponse-dto_CreateUserRequest"
+                            "$ref": "#/definitions/dto.SuccessResponse-dto_RoleResponse"
                         }
                     },
                     "400": {
@@ -6528,16 +6620,14 @@
                         }
                     }
                 }
-            }
-        },
-        "/api/v1/super-admin/users/{id}": {
-            "put": {
+            },
+            "delete": {
                 "security": [
                     {
                         "BearerAuth": []
                     }
                 ],
-                "description": "Update user information by ID",
+                "description": "Delete a named custom role. System roles are immutable. Cannot delete if assigned to any account.",
                 "consumes": [
                     "application/json"
                 ],
@@ -6545,13 +6635,249 @@
                     "application/json"
                 ],
                 "tags": [
-                    "Super Admin Users Management"
+                    "Super Admin Roles"
                 ],
-                "summary": "Edit User",
+                "summary": "Delete Named Role",
                 "parameters": [
                     {
                         "type": "string",
-                        "description": "User ID",
+                        "description": "Role ID",
+                        "name": "role_id",
+                        "in": "path",
+                        "required": true
+                    }
+                ],
+                "responses": {
+                    "200": {
+                        "description": "OK",
+                        "schema": {
+                            "$ref": "#/definitions/dto.SuccessResponse-any"
+                        }
+                    },
+                    "401": {
+                        "description": "Unauthorized",
+                        "schema": {
+                            "$ref": "#/definitions/dto.ErrorResponse"
+                        }
+                    },
+                    "403": {
+                        "description": "Forbidden",
+                        "schema": {
+                            "$ref": "#/definitions/dto.ErrorResponse"
+                        }
+                    },
+                    "409": {
+                        "description": "Conflict",
+                        "schema": {
+                            "$ref": "#/definitions/dto.ErrorResponse"
+                        }
+                    }
+                }
+            }
+        },
+        "/api/v1/super-admin/users": {
+            "get": {
+                "security": [
+                    {
+                        "BearerAuth": []
+                    }
+                ],
+                "description": "Retrieve a paginated list of all users with optional role filter. Supports pagination parameters (page, limit) and can filter by user role.",
+                "consumes": [
+                    "application/json"
+                ],
+                "produces": [
+                    "application/json"
+                ],
+                "tags": [
+                    "Super Admin Users Management"
+                ],
+                "summary": "List All Users with Pagination",
+                "parameters": [
+                    {
+                        "type": "integer",
+                        "description": "Page number for pagination. Minimum value is 1. Default is 1.",
+                        "name": "page",
+                        "in": "query"
+                    },
+                    {
+                        "type": "integer",
+                        "description": "Number of items per page. Minimum 1, Maximum 50. Default is 10.",
+                        "name": "limit",
+                        "in": "query"
+                    },
+                    {
+                        "type": "string",
+                        "description": "Filter users by role. Allowed values: user, admin, super_admin. Leave empty for no filter.",
+                        "name": "role",
+                        "in": "query"
+                    }
+                ],
+                "responses": {
+                    "200": {
+                        "description": "OK",
+                        "schema": {
+                            "$ref": "#/definitions/dto.SuccessResponse-array_dto_UserResponse"
+                        }
+                    },
+                    "400": {
+                        "description": "Bad Request",
+                        "schema": {
+                            "$ref": "#/definitions/dto.ErrorResponse"
+                        }
+                    },
+                    "401": {
+                        "description": "Unauthorized",
+                        "schema": {
+                            "$ref": "#/definitions/dto.ErrorResponse"
+                        }
+                    },
+                    "403": {
+                        "description": "Forbidden",
+                        "schema": {
+                            "$ref": "#/definitions/dto.ErrorResponse"
+                        }
+                    }
+                }
+            },
+            "post": {
+                "security": [
+                    {
+                        "BearerAuth": []
+                    }
+                ],
+                "description": "Create a new user account by providing user details",
+                "consumes": [
+                    "application/json"
+                ],
+                "produces": [
+                    "application/json"
+                ],
+                "tags": [
+                    "Super Admin Users Management"
+                ],
+                "summary": "Create Single User",
+                "parameters": [
+                    {
+                        "description": "Create User Request",
+                        "name": "request",
+                        "in": "body",
+                        "required": true,
+                        "schema": {
+                            "$ref": "#/definitions/dto.CreateUserRequest"
+                        }
+                    }
+                ],
+                "responses": {
+                    "200": {
+                        "description": "OK",
+                        "schema": {
+                            "$ref": "#/definitions/dto.SuccessResponse-dto_UserResponse"
+                        }
+                    },
+                    "400": {
+                        "description": "Bad Request",
+                        "schema": {
+                            "$ref": "#/definitions/dto.ErrorResponse"
+                        }
+                    },
+                    "401": {
+                        "description": "Unauthorized",
+                        "schema": {
+                            "$ref": "#/definitions/dto.ErrorResponse"
+                        }
+                    },
+                    "403": {
+                        "description": "Forbidden",
+                        "schema": {
+                            "$ref": "#/definitions/dto.ErrorResponse"
+                        }
+                    }
+                }
+            }
+        },
+        "/api/v1/super-admin/users/bulk": {
+            "post": {
+                "security": [
+                    {
+                        "BearerAuth": []
+                    }
+                ],
+                "description": "Create multiple user accounts at once",
+                "consumes": [
+                    "application/json"
+                ],
+                "produces": [
+                    "application/json"
+                ],
+                "tags": [
+                    "Super Admin Users Management"
+                ],
+                "summary": "Bulk Create Users",
+                "parameters": [
+                    {
+                        "description": "Bulk Create User Requests",
+                        "name": "requests",
+                        "in": "body",
+                        "required": true,
+                        "schema": {
+                            "type": "array",
+                            "items": {
+                                "$ref": "#/definitions/dto.CreateUserRequest"
+                            }
+                        }
+                    }
+                ],
+                "responses": {
+                    "200": {
+                        "description": "OK",
+                        "schema": {
+                            "$ref": "#/definitions/dto.SuccessResponse-dto_CreateUserRequest"
+                        }
+                    },
+                    "400": {
+                        "description": "Bad Request",
+                        "schema": {
+                            "$ref": "#/definitions/dto.ErrorResponse"
+                        }
+                    },
+                    "401": {
+                        "description": "Unauthorized",
+                        "schema": {
+                            "$ref": "#/definitions/dto.ErrorResponse"
+                        }
+                    },
+                    "403": {
+                        "description": "Forbidden",
+                        "schema": {
+                            "$ref": "#/definitions/dto.ErrorResponse"
+                        }
+                    }
+                }
+            }
+        },
+        "/api/v1/super-admin/users/{id}": {
+            "put": {
+                "security": [
+                    {
+                        "BearerAuth": []
+                    }
+                ],
+                "description": "Update user information by ID",
+                "consumes": [
+                    "application/json"
+                ],
+                "produces": [
+                    "application/json"
+                ],
+                "tags": [
+                    "Super Admin Users Management"
+                ],
+                "summary": "Edit User",
+                "parameters": [
+                    {
+                        "type": "string",
+                        "description": "User ID",
                         "name": "id",
                         "in": "path",
                         "required": true
@@ -7041,6 +7367,29 @@
                 }
             }
         },
+        "dto.AuditLogResponse": {
+            "type": "object",
+            "properties": {
+                "action": {
+                    "type": "string"
+                },
+                "actor_account_id": {
+                    "type": "string"
+                },
+                "created_at": {
+                    "type": "string"
+                },
+                "detail": {
+                    "type": "string"
+                },
+                "id": {
+                    "type": "string"
+                },
+                "target_id": {
+                    "type": "string"
+                }
+            }
+        },
         "dto.AuthenticatedUser": {
             "type": "object",
             "properties": {
@@ -7390,6 +7739,29 @@
                 }
             }
         },
+        "dto.CreateRoleRequest": {
+            "type": "object",
+            "required": [
+                "name"
+            ],
+            "properties": {
+                "academy_management": {
+                    "type": "boolean"
+                },
+                "content_management": {
+                    "type": "boolean"
+                },
+                "event_management": {
+                    "type": "boolean"
+                },
+                "exam_management": {
+                    "type": "boolean"
+                },
+                "name": {
+                    "type": "string"
+                }
+            }
+        },
         "dto.CreateUserRequest": {
             "type": "object",
             "required": [
@@ -7665,6 +8037,23 @@
                 }
             }
         },
+        "dto.Privileges": {
+            "type": "object",
+            "properties": {
+                "academy_management": {
+                    "type": "boolean"
+                },
+                "content_management": {
+                    "type": "boolean"
+                },
+                "event_management": {
+                    "type": "boolean"
+                },
+                "exam_management": {
+                    "type": "boolean"
+                }
+            }
+        },
         "dto.ProblemSetInjectResponse": {
             "type": "object",
             "properties": {
@@ -7922,6 +8311,61 @@
                 }
             }
         },
+        "dto.RoleResponse": {
+            "type": "object",
+            "properties": {
+                "academy_management": {
+                    "type": "boolean"
+                },
+                "content_management": {
+                    "type": "boolean"
+                },
+                "event_management": {
+                    "type": "boolean"
+                },
+                "exam_management": {
+                    "type": "boolean"
+                },
+                "id": {
+                    "type": "string"
+                },
+                "is_system": {
+                    "type": "boolean"
+                },
+                "name": {
+                    "type": "string"
+                }
+            }
+        },
+        "dto.SetUserRoleRequest": {
+            "type": "object",
+            "required": [
+                "privileges",
+                "role_name"
+            ],
+            "properties": {
+                "privileges": {
+                    "$ref": "#/definitions/dto.Privileges"
+                },
+                "role_name": {
+                    "type": "string"
+                }
+            }
+        },
+        "dto.SetUserRoleResponseData": {
+            "type": "object",
+            "properties": {
+                "account_id": {
+                    "type": "string"
+                },
+                "privileges": {
+                    "$ref": "#/definitions/dto.Privileges"
+                },
+                "role_name": {
+                    "type": "string"
+                }
+            }
+        },
         "dto.SignInRequest": {
             "type": "object",
             "required": [
@@ -8002,6 +8446,22 @@
                 }
             }
         },
+        "dto.SuccessResponse-array_dto_AuditLogResponse": {
+            "type": "object",
+            "properties": {
+                "data": {
+                    "type": "array",
+                    "items": {
+                        "$ref": "#/definitions/dto.AuditLogResponse"
+                    }
+                },
+                "message": {},
+                "meta_data": {},
+                "status": {
+                    "type": "string"
+                }
+            }
+        },
         "dto.SuccessResponse-array_dto_EventScoreboardItem": {
             "type": "object",
             "properties": {
@@ -8034,6 +8494,22 @@
                 }
             }
         },
+        "dto.SuccessResponse-array_dto_RoleResponse": {
+            "type": "object",
+            "properties": {
+                "data": {
+                    "type": "array",
+                    "items": {
+                        "$ref": "#/definitions/dto.RoleResponse"
+                    }
+                },
+                "message": {},
+                "meta_data": {},
+                "status": {
+                    "type": "string"
+                }
+            }
+        },
         "dto.SuccessResponse-array_dto_UserResponse": {
             "type": "object",
             "properties": {
@@ -8430,6 +8906,32 @@
                 }
             }
         },
+        "dto.SuccessResponse-dto_RoleResponse": {
+            "type": "object",
+            "properties": {
+                "data": {
+                    "$ref": "#/definitions/dto.RoleResponse"
+                },
+                "message": {},
+                "meta_data": {},
+                "status": {
+                    "type": "string"
+                }
+            }
+        },
+        "dto.SuccessResponse-dto_SetUserRoleResponseData": {
+            "type": "object",
+            "properties": {
+                "data": {
+                    "$ref": "#/definitions/dto.SetUserRoleResponseData"
+                },
+                "message": {},
+                "meta_data": {},
+                "status": {
+                    "type": "string"
+                }
+            }
+        },
         "dto.SuccessResponse-dto_UserResponse": {
             "type": "object",
             "properties": {
@@ -8805,6 +9307,26 @@
                 }
             }
         },
+        "dto.UpdateRoleRequest": {
+            "type": "object",
+            "properties": {
+                "academy_management": {
+                    "type": "boolean"
+                },
+                "content_management": {
+                    "type": "boolean"
+                },
+                "event_management": {
+                    "type": "boolean"
+                },
+                "exam_management": {
+                    "type": "boolean"
+                },
+                "name": {
+                    "type": "string"
+                }
+            }
+        },
         "dto.UpdateUserRequest": {
             "type": "object",
             "properties": {
@@ -8822,17 +9344,6 @@
                 }
             }
         },
-        "dto.UpdateUserRoleRequest": {
-            "type": "object",
-            "required": [
-                "role"
-            ],
-            "properties": {
-                "role": {
-                    "type": "string"
-                }
-            }
-        },
         "dto.UserResponse": {
             "type": "object",
             "properties": {
@@ -9259,12 +9770,24 @@
         "models.Account": {
             "type": "object",
             "properties": {
+                "academy_management": {
+                    "type": "boolean"
+                },
+                "content_management": {
+                    "type": "boolean"
+                },
                 "created_at": {
                     "type": "string"
                 },
                 "email": {
                     "type": "string"
                 },
+                "event_management": {
+                    "type": "boolean"
+                },
+                "exam_management": {
+                    "type": "boolean"
+                },
                 "full_name": {
                     "type": "string"
                 },
@@ -9280,6 +9803,15 @@
                 "role": {
                     "type": "string"
                 },
+                "role_id": {
+                    "type": "string"
+                },
+                "role_name": {
+                    "type": "string"
+                },
+                "token_version": {
+                    "type": "integer"
+                },
                 "username": {
                     "type": "string"
                 }

swagger/docs/swagger.yaml

@@ -250,6 +250,21 @@ definitions:
       account_id:
         type: string
     type: object
+  dto.AuditLogResponse:
+    properties:
+      action:
+        type: string
+      actor_account_id:
+        type: string
+      created_at:
+        type: string
+      detail:
+        type: string
+      id:
+        type: string
+      target_id:
+        type: string
+    type: object
   dto.AuthenticatedUser:
     properties:
       account:
@@ -481,6 +496,21 @@ definitions:
     - question
     - type
     type: object
+  dto.CreateRoleRequest:
+    properties:
+      academy_management:
+        type: boolean
+      content_management:
+        type: boolean
+      event_management:
+        type: boolean
+      exam_management:
+        type: boolean
+      name:
+        type: string
+    required:
+    - name
+    type: object
   dto.CreateUserRequest:
     properties:
       email:
@@ -662,6 +692,17 @@ definitions:
     - option_name
     - option_values
     type: object
+  dto.Privileges:
+    properties:
+      academy_management:
+        type: boolean
+      content_management:
+        type: boolean
+      event_management:
+        type: boolean
+      exam_management:
+        type: boolean
+    type: object
   dto.ProblemSetInjectResponse:
     properties:
       file:
@@ -829,6 +870,42 @@ definitions:
     required:
     - question_ids
     type: object
+  dto.RoleResponse:
+    properties:
+      academy_management:
+        type: boolean
+      content_management:
+        type: boolean
+      event_management:
+        type: boolean
+      exam_management:
+        type: boolean
+      id:
+        type: string
+      is_system:
+        type: boolean
+      name:
+        type: string
+    type: object
+  dto.SetUserRoleRequest:
+    properties:
+      privileges:
+        $ref: '#/definitions/dto.Privileges'
+      role_name:
+        type: string
+    required:
+    - privileges
+    - role_name
+    type: object
+  dto.SetUserRoleResponseData:
+    properties:
+      account_id:
+        type: string
+      privileges:
+        $ref: '#/definitions/dto.Privileges'
+      role_name:
+        type: string
+    type: object
   dto.SignInRequest:
     properties:
       email_or_username:
@@ -884,6 +961,17 @@ definitions:
       status:
         type: string
     type: object
+  dto.SuccessResponse-array_dto_AuditLogResponse:
+    properties:
+      data:
+        items:
+          $ref: '#/definitions/dto.AuditLogResponse'
+        type: array
+      message: {}
+      meta_data: {}
+      status:
+        type: string
+    type: object
   dto.SuccessResponse-array_dto_EventScoreboardItem:
     properties:
       data:
@@ -906,6 +994,17 @@ definitions:
       status:
         type: string
     type: object
+  dto.SuccessResponse-array_dto_RoleResponse:
+    properties:
+      data:
+        items:
+          $ref: '#/definitions/dto.RoleResponse'
+        type: array
+      message: {}
+      meta_data: {}
+      status:
+        type: string
+    type: object
   dto.SuccessResponse-array_dto_UserResponse:
     properties:
       data:
@@ -1179,6 +1278,24 @@ definitions:
       status:
         type: string
     type: object
+  dto.SuccessResponse-dto_RoleResponse:
+    properties:
+      data:
+        $ref: '#/definitions/dto.RoleResponse'
+      message: {}
+      meta_data: {}
+      status:
+        type: string
+    type: object
+  dto.SuccessResponse-dto_SetUserRoleResponseData:
+    properties:
+      data:
+        $ref: '#/definitions/dto.SetUserRoleResponseData'
+      message: {}
+      meta_data: {}
+      status:
+        type: string
+    type: object
   dto.SuccessResponse-dto_UserResponse:
     properties:
       data:
@@ -1432,6 +1549,19 @@ definitions:
     required:
     - final_score
     type: object
+  dto.UpdateRoleRequest:
+    properties:
+      academy_management:
+        type: boolean
+      content_management:
+        type: boolean
+      event_management:
+        type: boolean
+      exam_management:
+        type: boolean
+      name:
+        type: string
+    type: object
   dto.UpdateUserRequest:
     properties:
       email:
@@ -1443,13 +1573,6 @@ definitions:
       username:
         type: string
     type: object
-  dto.UpdateUserRoleRequest:
-    properties:
-      role:
-        type: string
-    required:
-    - role
-    type: object
   dto.UserResponse:
     properties:
       created_at: {}
@@ -1730,10 +1853,18 @@ definitions:
     type: object
   models.Account:
     properties:
+      academy_management:
+        type: boolean
+      content_management:
+        type: boolean
       created_at:
         type: string
       email:
         type: string
+      event_management:
+        type: boolean
+      exam_management:
+        type: boolean
       full_name:
         type: string
       id:
@@ -1744,6 +1875,12 @@ definitions:
         type: boolean
       role:
         type: string
+      role_id:
+        type: string
+      role_name:
+        type: string
+      token_version:
+        type: integer
       username:
         type: string
     type: object
@@ -3214,39 +3351,6 @@ paths:
       summary: 'Admin: List Academy Participants'
       tags:
       - Admin Academy
-  /api/v1/admin/authentication/{account_id}/assign:
-    put:
-      consumes:
-      - application/json
-      description: Update the role of a user account
-      parameters:
-      - description: Account ID
-        in: path
-        name: accountId
-        required: true
-        type: string
-      - description: Update User Role Request
-        in: body
-        name: request
-        required: true
-        schema:
-          $ref: '#/definitions/dto.UpdateUserRoleRequest'
-      produces:
-      - application/json
-      responses:
-        "200":
-          description: OK
-          schema:
-            $ref: '#/definitions/dto.SuccessResponse-models_Account'
-        "400":
-          description: Bad Request
-          schema:
-            $ref: '#/definitions/dto.ErrorResponse'
-      security:
-      - BearerAuth: []
-      summary: Update User Role
-      tags:
-      - Authentication
   /api/v1/admin/events:
     get:
       consumes:
@@ -6049,6 +6153,60 @@ paths:
       summary: Seed Provinces
       tags:
       - Region
+  /api/v1/super-admin/accounts/{account_id}/role:
+    put:
+      consumes:
+      - application/json
+      description: Set the role and privileges of a user account. Supports system
+        roles, named custom roles, or "custom" with explicit flags.
+      parameters:
+      - description: Account ID
+        in: path
+        name: account_id
+        required: true
+        type: string
+      - description: Set User Role Request
+        in: body
+        name: request
+        required: true
+        schema:
+          $ref: '#/definitions/dto.SetUserRoleRequest'
+      produces:
+      - application/json
+      responses:
+        "200":
+          description: OK
+          schema:
+            $ref: '#/definitions/dto.SuccessResponse-dto_SetUserRoleResponseData'
+        "400":
+          description: Bad Request
+          schema:
+            $ref: '#/definitions/dto.ErrorResponse'
+        "401":
+          description: Unauthorized
+          schema:
+            $ref: '#/definitions/dto.ErrorResponse'
+        "403":
+          description: Forbidden
+          schema:
+            $ref: '#/definitions/dto.ErrorResponse'
+        "404":
+          description: Not Found
+          schema:
+            $ref: '#/definitions/dto.ErrorResponse'
+        "409":
+          description: Conflict
+          schema:
+            $ref: '#/definitions/dto.ErrorResponse'
+        "422":
+          description: Unprocessable Entity
+          schema:
+            $ref: '#/definitions/dto.ErrorResponse'
+      security:
+      - BearerAuth: []
+      summary: Set User Role
+      tags:
+      - Super Admin Accounts
   /api/v1/super-admin/inject/probset:
     post:
       consumes:
@@ -6140,6 +6298,56 @@ paths:
       summary: 'Super Admin: Inject Zip to Storage'
       tags:
       - Super Admin Inject
+  /api/v1/super-admin/logs:
+    get:
+      consumes:
+      - application/json
+      description: Get paginated audit logs with optional filters. Superadmin only.
+      parameters:
+      - description: Page number (default 1)
+        in: query
+        name: page
+        type: integer
+      - description: Items per page (default 10, max 50)
+        in: query
+        name: limit
+        type: integer
+      - description: Filter by action
+        in: query
+        name: action
+        type: string
+      - description: Filter by actor account ID
+        in: query
+        name: actor_account_id
+        type: string
+      - description: Start time (RFC3339)
+        in: query
+        name: from
+        type: string
+      - description: End time (RFC3339)
+        in: query
+        name: to
+        type: string
+      produces:
+      - application/json
+      responses:
+        "200":
+          description: OK
+          schema:
+            $ref: '#/definitions/dto.SuccessResponse-array_dto_AuditLogResponse'
+        "401":
+          description: Unauthorized
+          schema:
+            $ref: '#/definitions/dto.ErrorResponse'
+        "403":
+          description: Forbidden
+          schema:
+            $ref: '#/definitions/dto.ErrorResponse'
+      security:
+      - BearerAuth: []
+      summary: List Audit Logs
+      tags:
+      - Super Admin Audit
   /api/v1/super-admin/repair/problemset/naming/migrate:
     post:
       consumes:
@@ -6211,6 +6419,148 @@ paths:
       summary: 'Super Admin: Repair Question Storage Path'
       tags:
       - Super Admin Repair
+  /api/v1/super-admin/roles:
+    get:
+      consumes:
+      - application/json
+      description: Get all system and named custom roles with their privilege flags
+      produces:
+      - application/json
+      responses:
+        "200":
+          description: OK
+          schema:
+            $ref: '#/definitions/dto.SuccessResponse-array_dto_RoleResponse'
+        "401":
+          description: Unauthorized
+          schema:
+            $ref: '#/definitions/dto.ErrorResponse'
+        "403":
+          description: Forbidden
+          schema:
+            $ref: '#/definitions/dto.ErrorResponse'
+      security:
+      - BearerAuth: []
+      summary: List All Roles
+      tags:
+      - Super Admin Roles
+    post:
+      consumes:
+      - application/json
+      description: Create a new named custom role with privilege flags. Superadmin
+        only.
+      parameters:
+      - description: Create Role Request
+        in: body
+        name: request
+        required: true
+        schema:
+          $ref: '#/definitions/dto.CreateRoleRequest'
+      produces:
+      - application/json
+      responses:
+        "200":
+          description: OK
+          schema:
+            $ref: '#/definitions/dto.SuccessResponse-dto_RoleResponse'
+        "400":
+          description: Bad Request
+          schema:
+            $ref: '#/definitions/dto.ErrorResponse'
+        "401":
+          description: Unauthorized
+          schema:
+            $ref: '#/definitions/dto.ErrorResponse'
+        "403":
+          description: Forbidden
+          schema:
+            $ref: '#/definitions/dto.ErrorResponse'
+        "409":
+          description: Conflict
+          schema:
+            $ref: '#/definitions/dto.ErrorResponse'
+      security:
+      - BearerAuth: []
+      summary: Create Named Role
+      tags:
+      - Super Admin Roles
+  /api/v1/super-admin/roles/{role_id}:
+    delete:
+      consumes:
+      - application/json
+      description: Delete a named custom role. System roles are immutable. Cannot
+        delete if assigned to any account.
+      parameters:
+      - description: Role ID
+        in: path
+        name: role_id
+        required: true
+        type: string
+      produces:
+      - application/json
+      responses:
+        "200":
+          description: OK
+          schema:
+            $ref: '#/definitions/dto.SuccessResponse-any'
+        "401":
+          description: Unauthorized
+          schema:
+            $ref: '#/definitions/dto.ErrorResponse'
+        "403":
+          description: Forbidden
+          schema:
+            $ref: '#/definitions/dto.ErrorResponse'
+        "409":
+          description: Conflict
+          schema:
+            $ref: '#/definitions/dto.ErrorResponse'
+      security:
+      - BearerAuth: []
+      summary: Delete Named Role
+      tags:
+      - Super Admin Roles
+    put:
+      consumes:
+      - application/json
+      description: Update a named custom role's privilege flags. System roles are
+        immutable.
+      parameters:
+      - description: Role ID
+        in: path
+        name: role_id
+        required: true
+        type: string
+      - description: Update Role Request
+        in: body
+        name: request
+        required: true
+        schema:
+          $ref: '#/definitions/dto.UpdateRoleRequest'
+      produces:
+      - application/json
+      responses:
+        "200":
+          description: OK
+          schema:
+            $ref: '#/definitions/dto.SuccessResponse-dto_RoleResponse'
+        "400":
+          description: Bad Request
+          schema:
+            $ref: '#/definitions/dto.ErrorResponse'
+        "401":
+          description: Unauthorized
+          schema:
+            $ref: '#/definitions/dto.ErrorResponse'
+        "403":
+          description: Forbidden
+          schema:
+            $ref: '#/definitions/dto.ErrorResponse'
+      security:
+      - BearerAuth: []
+      summary: Update Named Role
+      tags:
+      - Super Admin Roles
   /api/v1/super-admin/users:
     get:
       consumes: