partial implement (Save)

backend/internal/graph/schema.graphql

@@ -38,11 +38,17 @@ type Query {
   # Fetch permissions for a path
   acl(path: String!): [ACLEntry!]!
 
+  # Fetch all permissions for a specific user or group (admin only).
+  subjectAcl(subjectType: String!, subjectId: Int!): [ACLEntry!]!
+
   # Returns all users and groups that can be assigned to ACL entries (admin only).
   aclSubjects: ACLSubjects!
 
   # Returns "local", "ldap", or "guest" for a given username.
   userAuthType(username: String!): String!
+
+  # Returns the role of the currently authenticated user ("admin", "user", "guest").
+  currentUserRole: String!
 }
 
 type Mutation {