<?php
if (!isset($_SESSION['admin_id'])) {
    header("Location: admin_login.php");
    exit;
}

/**
 * Check if admin has permission
 */
function admin_can($perm){
    global $conn;

    // Super admin bypass
    if (!empty($_SESSION['is_super_admin']) && $_SESSION['is_super_admin'] == 1) {
        return true;
    }

    $stmt = $conn->prepare("
        SELECT id FROM admin_permissions
        WHERE admin_id=? AND permission_key=?
        LIMIT 1
    ");
    $stmt->bind_param("is", $_SESSION['admin_id'], $perm);
    $stmt->execute();
    $stmt->store_result();

    return $stmt->num_rows > 0;
}