Allow OS notifications

lib/widgets/app_shell.dart

@@ -387,6 +387,12 @@ List<NavSection> _buildSections(String role) {
             icon: Icons.groups_2_outlined,
             selectedIcon: Icons.groups_2,
           ),
+          NavItem(
+            label: 'Permissions',
+            route: '/settings/permissions',
+            icon: Icons.lock_open,
+            selectedIcon: Icons.lock,
+          ),
           NavItem(
             label: 'Logout',
             route: '',
@@ -398,7 +404,23 @@ List<NavSection> _buildSections(String role) {
     ];
   }
 
-  return [NavSection(label: 'Operations', items: mainItems)];
+  // non-admin users still get a simple Settings section containing only
+  // permissions.  this keeps the screen accessible without exposing the
+  // administrative management screens.
+  return [
+    NavSection(label: 'Operations', items: mainItems),
+    NavSection(
+      label: 'Settings',
+      items: [
+        NavItem(
+          label: 'Permissions',
+          route: '/settings/permissions',
+          icon: Icons.lock_open,
+          selectedIcon: Icons.lock,
+        ),
+      ],
+    ),
+  ];
 }
 
 List<NavItem> _standardNavItems() {