using System.Threading;
using System.Threading.Tasks;
using GB5Shared.DTO.Framework.Login;

namespace GB5Shared.Authorization
{
    public interface IMenuRightsDAL
    {
        /// <summary>
        /// Returns the MROLEVSMENU.ALLOW string for the given menu code and role, or null when
        /// no grant row exists (caller must treat a missing grant as deny-by-default).
        /// </summary>
        Task<string?> GetAllowStringAsync(string menuCode, int roleId, LoginDTO login, CancellationToken ct);
    }
}