feat: implementation du role Gestionnaire RH et refonte de la gestion des offres

routes/web.php

@@ -6,16 +6,28 @@ use Illuminate\Support\Facades\Route;
 use Inertia\Inertia;
 
 Route::get('/', function () {
-    $latestJobs = \App\Models\JobPosition::with('tenant')->orderBy('created_at', 'desc')->take(3)->get()->map(function($job) {
-        $job->description = strip_tags(\Illuminate\Support\Str::markdown($job->description));
-        return $job;
-    });
+    $latestJobs = \App\Models\JobPosition::with('tenant')
+        ->where(function($q) {
+            $q->whereNull('expires_at')
+              ->orWhere('expires_at', '>=', now());
+        })
+        ->orderBy('created_at', 'desc')
+        ->take(3)
+        ->get()
+        ->map(function($job) {
+            $job->description = strip_tags(\Illuminate\Support\Str::markdown($job->description));
+            return $job;
+        });
     return Inertia::render('Welcome', [
         'canLogin' => Route::has('login'),
         'latestJobs' => $latestJobs,
     ]);
 });
 
+Route::get('/politique-de-confidentialite', function () {
+    return Inertia::render('Public/PrivacyPolicy');
+})->name('privacy-policy');
+
 use App\Models\Candidate;
 use App\Models\Attempt;
 
@@ -25,27 +37,38 @@ Route::get('/dashboard', function () {
     $topCandidates = [];
 
     if (auth()->user()->isAdmin()) {
+        $user = auth()->user();
+        $isHR = $user->role === 'gestionnaire_rh';
+        
         $allCandidates = Candidate::with(['attempts'])->get();
         $stats = [
             'total_candidates' => Candidate::count(),
-            'selected_candidates' => Candidate::where('is_selected', true)->count(),
-            'finished_tests' => Attempt::whereNotNull('finished_at')->count(),
-            'average_score' => round($allCandidates->avg('weighted_score') ?? 0, 1),
-            'best_score' => round($allCandidates->max('weighted_score') ?? 0, 1),
         ];
 
-        $topCandidates = Candidate::with(['user', 'attempts'])
-            ->get()
-            ->sortByDesc('weighted_score')
-            ->take(10)
-            ->map(function($candidate) {
+        if (!$isHR) {
+            $stats['selected_candidates'] = Candidate::where('is_selected', true)->count();
+            $stats['finished_tests'] = Attempt::whereNotNull('finished_at')->count();
+            $stats['average_score'] = round($allCandidates->avg('weighted_score') ?? 0, 1);
+            $stats['best_score'] = round($allCandidates->max('weighted_score') ?? 0, 1);
+        }
+
+        $query = Candidate::with(['user', 'attempts']);
+        
+        if ($isHR) {
+            // For HR, just show latest candidates, no specific "Top" ranking
+            $candidates = $query->latest()->take(10)->get();
+        } else {
+            $candidates = $query->get()->sortByDesc('weighted_score')->take(10);
+        }
+
+        $topCandidates = $candidates->map(function($candidate) use ($isHR) {
                 return [
                     'id' => $candidate->id,
                     'name' => $candidate->user->name,
                     'email' => $candidate->user->email,
                     'status' => $candidate->status,
-                    'weighted_score' => $candidate->weighted_score,
-                    'ai_analysis' => $candidate->ai_analysis
+                    'weighted_score' => $isHR ? null : $candidate->weighted_score,
+                    'ai_analysis' => $isHR ? null : $candidate->ai_analysis
                 ];
             })
             ->values()
@@ -88,7 +111,7 @@ Route::middleware('auth')->group(function () {
 
     // Admin Routes
     Route::middleware('admin')->prefix('admin')->name('admin.')->group(function () {
-        Route::get('/comparative', [\App\Http\Controllers\CandidateController::class, 'comparative'])->name('comparative');
+        Route::get('/comparative', [\App\Http\Controllers\CandidateController::class, 'comparative'])->middleware('restrict_hr')->name('comparative');
         Route::get('/candidates/selected', [\App\Http\Controllers\CandidateController::class, 'selectedCandidates'])->name('candidates.selected');
         Route::get('/candidates/map', [\App\Http\Controllers\CandidateController::class, 'map'])->name('candidates.map');
         Route::post('/candidates/update-order', [\App\Http\Controllers\CandidateController::class, 'updateOrder'])->name('candidates.update-order');
@@ -98,19 +121,19 @@ Route::middleware('auth')->group(function () {
         Route::patch('/candidates/{candidate}/position', [\App\Http\Controllers\CandidateController::class, 'updatePosition'])->name('candidates.update-position');
         Route::patch('/candidates/{candidate}/tenant', [\App\Http\Controllers\CandidateController::class, 'updateTenant'])->name('candidates.update-tenant');
         Route::patch('/candidates/{candidate}/toggle-selection', [\App\Http\Controllers\CandidateController::class, 'toggleSelection'])->name('candidates.toggle-selection');
-        Route::post('/candidates/{candidate}/analyze', [\App\Http\Controllers\AIAnalysisController::class, 'analyze'])->name('candidates.analyze');
+        Route::post('/candidates/{candidate}/analyze', [\App\Http\Controllers\AIAnalysisController::class, 'analyze'])->middleware('restrict_hr')->name('candidates.analyze');
         Route::post('/candidates/{candidate}/reset-password', [\App\Http\Controllers\CandidateController::class, 'resetPassword'])->name('candidates.reset-password');
         Route::get('/documents/{document}', [\App\Http\Controllers\DocumentController::class, 'show'])->name('documents.show');
         Route::get('/candidates/{candidate}/export-dossier', [\App\Http\Controllers\Admin\CandidateExportController::class, 'exportDossier'])->name('candidates.export-dossier');
         Route::get('/candidates/{candidate}/export-zip', [\App\Http\Controllers\Admin\CandidateExportController::class, 'exportZip'])->name('candidates.export-zip');
 
-        Route::resource('quizzes', \App\Http\Controllers\QuizController::class)->only(['index', 'store', 'show', 'update', 'destroy']);
+        Route::resource('quizzes', \App\Http\Controllers\QuizController::class)->middleware('restrict_hr')->only(['index', 'store', 'show', 'update', 'destroy']);
         Route::resource('job-positions', \App\Http\Controllers\JobPositionController::class)->only(['index', 'store', 'update', 'destroy']);
         Route::post('/job-positions/ai-fpt', [\App\Http\Controllers\Admin\JobPositionAiHelperController::class, 'generate'])->name('job-positions.ai-fpt');
-        Route::resource('quizzes.questions', \App\Http\Controllers\QuestionController::class)->only(['store', 'update', 'destroy']);
+        Route::resource('quizzes.questions', \App\Http\Controllers\QuestionController::class)->middleware('restrict_hr')->only(['store', 'update', 'destroy']);
         Route::resource('tenants', \App\Http\Controllers\TenantController::class)->only(['index', 'store', 'update', 'destroy']);
-        Route::resource('users', \App\Http\Controllers\UserController::class)->except(['show', 'create', 'edit']);
-        Route::post('/users/{user}/reset-password', [\App\Http\Controllers\UserController::class, 'resetPassword'])->name('users.reset-password');
+        Route::resource('users', \App\Http\Controllers\UserController::class)->middleware('restrict_hr')->except(['show', 'create', 'edit']);
+        Route::post('/users/{user}/reset-password', [\App\Http\Controllers\UserController::class, 'resetPassword'])->middleware('restrict_hr')->name('users.reset-password');
         Route::get('/backup', [\App\Http\Controllers\BackupController::class, 'download'])->name('backup');
         Route::delete('/attempts/{attempt}', [\App\Http\Controllers\AttemptController::class, 'destroy'])->name('attempts.destroy');
         Route::patch('/answers/{answer}/score', [\App\Http\Controllers\AttemptController::class, 'updateAnswerScore'])->name('answers.update-score');