PermissionEvaluationStrategy

Determines how effective permissions are resolved for a company user.

The default implementation performs a flat union of all permission names across the user's assigned roles.

Custom implementations can add business-unit-scoped permissions, hierarchical inheritance, deny rules, or external authorization checks.