update HR dan Payroll

application/config/accounting.php

@@ -69,6 +69,7 @@ $config['document_numbering'] = array(
     ,'payroll' => array('prefix' => 'PRL', 'padding' => 6)
     ,'payroll_payment' => array('prefix' => 'PRP', 'padding' => 6)
     ,'technician_equipment' => array('prefix' => 'TEQ', 'padding' => 6)
+    ,'leave_request' => array('prefix' => 'LV', 'padding' => 6)
 );
 
 $config['require_separate_journal_approver'] = filter_var(

application/config/config.php

@@ -391,7 +391,9 @@ if (ENVIRONMENT === 'production' && $config['encryption_key'] === 'development-o
 $config['sess_driver'] = app_env('SESSION_DRIVER', 'database') ?: 'database';
 $config['sess_cookie_name'] = 'accounting_session';
 $config['sess_samesite'] = 'Lax';
-$config['sess_expiration'] = 7200;
+// Cookie/storage memakai batas teknis terpanjang (7 hari). Hard expiry setiap
+// pengguna tetap dihitung dari login pertama oleh UserSessionService.
+$config['sess_expiration'] = (int) (app_env('SESSION_EXPIRATION', 604800) ?: 604800);
 $config['sess_save_path'] = $config['sess_driver'] === 'database' ? 'ci_sessions' : sys_get_temp_dir();
 $config['sess_match_ip'] = FALSE;
 $config['sess_time_to_update'] = 300;

application/config/permissions.php

@@ -18,7 +18,12 @@ $config['permission_features'] = array(
     'asset' => 'Aset Tetap',
     'jurnal' => 'Jurnal & Periode Accounting',
     'reports' => 'Laporan Profesional', 'budgets' => 'Budget',
-    'employees' => 'HR, Absensi & Payroll'
+    'hr_organization' => 'HR - Departemen & Posisi',
+    'hr_employees' => 'HR - Data Karyawan',
+    'hr_schedules' => 'HR - Jadwal, Shift & Hari Libur',
+    'hr_attendance' => 'HR - Absensi & Pengajuan Manual',
+    'hr_leave' => 'HR - Cuti & Izin',
+    'payroll' => 'Payroll Control'
 );
 $config['permission_actions'] = array(
     'can_view' => 'Lihat', 'can_create' => 'Buat', 'can_update' => 'Ubah',

application/config/routes.php

@@ -55,6 +55,14 @@ $route['translate_uri_dashes'] = FALSE;
 
 $route['login'] = 'auth/index';
 $route['logout'] = 'auth/logout';
+$route['profile'] = 'profile/index/settings';
+$route['profile/update-profile'] = 'profile/update_profile';
+$route['profile/update-security'] = 'profile/update_security';
+$route['profile/update-password'] = 'profile/update_password';
+$route['profile/revoke-session/(:num)'] = 'profile/revoke_session/$1';
+
+// Payroll profesional memakai satu controller utama; URL lama tetap membuka halaman yang sama.
+$route['payroll'] = 'hrpayroll/index';
 
 // untuk webhook absensi
 $route['iclock/cdata'] = 'AttendanceWebhook/cdata';