diff --git a/README.md b/README.md
index 7854691..b418753 100644
--- a/README.md
+++ b/README.md
@@ -160,6 +160,7 @@ php artisan config:cache
 php artisan route:cache
 php artisan view:cache
 php artisan permission:cache-reset
+php artisan filament:optimize
 ```
 
 ---
diff --git a/app/Filament/Resources/MemberDues/MemberDueResource.php b/app/Filament/Resources/MemberDues/MemberDueResource.php
index 3055a5a..aa1b6d3 100644
--- a/app/Filament/Resources/MemberDues/MemberDueResource.php
+++ b/app/Filament/Resources/MemberDues/MemberDueResource.php
@@ -8,20 +8,22 @@ use App\Filament\Resources\MemberDues\Pages\ListMemberDues;
 use App\Filament\Resources\MemberDues\Schemas\MemberDueForm;
 use App\Filament\Resources\MemberDues\Tables\MemberDuesTable;
 use App\Models\MemberDue;
+use BackedEnum;
 use Filament\Resources\Resource;
 use Filament\Schemas\Schema;
+use Filament\Support\Icons\Heroicon;
 use Filament\Tables\Table;
 
 class MemberDueResource extends Resource
 {
     protected static ?string $model = MemberDue::class;
-    protected static string|\BackedEnum|null $navigationIcon = 'heroicon-o-currency-dollar';
+    protected static string|BackedEnum|null $navigationIcon = Heroicon::OutlinedRectangleStack;
     protected static string|\UnitEnum|null $navigationGroup = 'Organisasi';
-    protected static ?string $modelLabel = 'Iuran Anggota';
+    protected static ?string $navigationLabel = 'Iuran Anggota';
 
-    public static function form(Schema $form): Schema
+    public static function form(Schema $schema): Schema
     {
-        return MemberDueForm::configure($form);
+        return MemberDueForm::configure($schema);
     }
 
     public static function table(Table $table): Table
@@ -29,12 +31,19 @@ class MemberDueResource extends Resource
         return MemberDuesTable::configure($table);
     }
 
+    public static function getRelations(): array
+    {
+        return [
+            //
+        ];
+    }
+
     public static function getPages(): array
     {
         return [
-            'index'  => ListMemberDues::route('/'),
+            'index' => ListMemberDues::route('/'),
             'create' => CreateMemberDue::route('/create'),
-            'edit'   => EditMemberDue::route('/{record}/edit'),
+            'edit' => EditMemberDue::route('/{record}/edit'),
         ];
     }
 }
diff --git a/app/Filament/Resources/MemberDues/Pages/EditMemberDue.php b/app/Filament/Resources/MemberDues/Pages/EditMemberDue.php
index 148f555..49c5b26 100644
--- a/app/Filament/Resources/MemberDues/Pages/EditMemberDue.php
+++ b/app/Filament/Resources/MemberDues/Pages/EditMemberDue.php
@@ -3,9 +3,17 @@
 namespace App\Filament\Resources\MemberDues\Pages;
 
 use App\Filament\Resources\MemberDues\MemberDueResource;
+use Filament\Actions\DeleteAction;
 use Filament\Resources\Pages\EditRecord;
 
 class EditMemberDue extends EditRecord
 {
     protected static string $resource = MemberDueResource::class;
+
+    protected function getHeaderActions(): array
+    {
+        return [
+            DeleteAction::make(),
+        ];
+    }
 }
diff --git a/app/Filament/Resources/MemberDues/Pages/ListMemberDues.php b/app/Filament/Resources/MemberDues/Pages/ListMemberDues.php
index 6193266..03e6cf1 100644
--- a/app/Filament/Resources/MemberDues/Pages/ListMemberDues.php
+++ b/app/Filament/Resources/MemberDues/Pages/ListMemberDues.php
@@ -12,6 +12,8 @@ class ListMemberDues extends ListRecords
 
     protected function getHeaderActions(): array
     {
-        return [CreateAction::make()];
+        return [
+            CreateAction::make(),
+        ];
     }
 }
diff --git a/app/Filament/Resources/MemberDues/Tables/MemberDuesTable.php b/app/Filament/Resources/MemberDues/Tables/MemberDuesTable.php
index 3091841..f9c2058 100644
--- a/app/Filament/Resources/MemberDues/Tables/MemberDuesTable.php
+++ b/app/Filament/Resources/MemberDues/Tables/MemberDuesTable.php
@@ -5,7 +5,6 @@ namespace App\Filament\Resources\MemberDues\Tables;
 use Filament\Actions\BulkActionGroup;
 use Filament\Actions\DeleteBulkAction;
 use Filament\Actions\EditAction;
-use Filament\Tables\Columns\BadgeColumn;
 use Filament\Tables\Columns\TextColumn;
 use Filament\Tables\Filters\SelectFilter;
 use Filament\Tables\Table;
diff --git a/app/Filament/Resources/Posts/PostResource.php b/app/Filament/Resources/Posts/PostResource.php
index 8fc3565..fcca69b 100644
--- a/app/Filament/Resources/Posts/PostResource.php
+++ b/app/Filament/Resources/Posts/PostResource.php
@@ -17,7 +17,7 @@ class PostResource extends Resource
 {
     protected static ?string $model = Post::class;
     protected static string|\BackedEnum|null $navigationIcon = 'heroicon-o-newspaper';
-    protected static string|\UnitEnum|null $navigationGroup = 'Konten';
+    protected static string|\UnitEnum|null $navigationGroup = 'Blog';
     protected static ?string $navigationLabel = 'Post';
 
     // Label dinamis sesuai role
diff --git a/app/Policies/MemberDuePolicy.php b/app/Policies/MemberDuePolicy.php
new file mode 100644
index 0000000..50d60d5
--- /dev/null
+++ b/app/Policies/MemberDuePolicy.php
@@ -0,0 +1,75 @@
+<?php
+
+declare(strict_types=1);
+
+namespace App\Policies;
+
+use Illuminate\Foundation\Auth\User as AuthUser;
+use App\Models\MemberDue;
+use Illuminate\Auth\Access\HandlesAuthorization;
+
+class MemberDuePolicy
+{
+    use HandlesAuthorization;
+    
+    public function viewAny(AuthUser $authUser): bool
+    {
+        return $authUser->can('ViewAny:MemberDue');
+    }
+
+    public function view(AuthUser $authUser, MemberDue $memberDue): bool
+    {
+        return $authUser->can('View:MemberDue');
+    }
+
+    public function create(AuthUser $authUser): bool
+    {
+        return $authUser->can('Create:MemberDue');
+    }
+
+    public function update(AuthUser $authUser, MemberDue $memberDue): bool
+    {
+        return $authUser->can('Update:MemberDue');
+    }
+
+    public function delete(AuthUser $authUser, MemberDue $memberDue): bool
+    {
+        return $authUser->can('Delete:MemberDue');
+    }
+
+    public function deleteAny(AuthUser $authUser): bool
+    {
+        return $authUser->can('DeleteAny:MemberDue');
+    }
+
+    public function restore(AuthUser $authUser, MemberDue $memberDue): bool
+    {
+        return $authUser->can('Restore:MemberDue');
+    }
+
+    public function forceDelete(AuthUser $authUser, MemberDue $memberDue): bool
+    {
+        return $authUser->can('ForceDelete:MemberDue');
+    }
+
+    public function forceDeleteAny(AuthUser $authUser): bool
+    {
+        return $authUser->can('ForceDeleteAny:MemberDue');
+    }
+
+    public function restoreAny(AuthUser $authUser): bool
+    {
+        return $authUser->can('RestoreAny:MemberDue');
+    }
+
+    public function replicate(AuthUser $authUser, MemberDue $memberDue): bool
+    {
+        return $authUser->can('Replicate:MemberDue');
+    }
+
+    public function reorder(AuthUser $authUser): bool
+    {
+        return $authUser->can('Reorder:MemberDue');
+    }
+
+}
\ No newline at end of file
diff --git a/app/Policies/VotePolicy.php b/app/Policies/VotePolicy.php
index 2c57d89..165d41a 100644
--- a/app/Policies/VotePolicy.php
+++ b/app/Policies/VotePolicy.php
@@ -14,12 +14,12 @@ class VotePolicy
     
     public function viewAny(AuthUser $authUser): bool
     {
-        return true;
+        return $authUser->can('ViewAny:Vote');
     }
 
     public function view(AuthUser $authUser, Vote $vote): bool
     {
-        return true;
+        return $authUser->can('View:Vote');
     }
 
     public function create(AuthUser $authUser): bool
diff --git a/app/Providers/Filament/AdminPanelProvider.php b/app/Providers/Filament/AdminPanelProvider.php
index 887968e..d3047c5 100644
--- a/app/Providers/Filament/AdminPanelProvider.php
+++ b/app/Providers/Filament/AdminPanelProvider.php
@@ -36,9 +36,7 @@ class AdminPanelProvider extends PanelProvider
             ->resourceCreatePageRedirect('index')
             ->resourceEditPageRedirect('index')
             ->databaseNotifications()
-            ->databaseNotificationsPolling('30s')
             ->discoverResources(in: app_path('Filament/Resources'), for: 'App\Filament\Resources')
-            ->discoverPages(in: app_path('Filament/Pages'), for: 'App\Filament\Pages')
             ->pages([
                 Dashboard::class,
             ])
diff --git a/database/seeders/DatabaseSeeder.php b/database/seeders/DatabaseSeeder.php
index 84e21a0..41fbe4b 100644
--- a/database/seeders/DatabaseSeeder.php
+++ b/database/seeders/DatabaseSeeder.php
@@ -9,7 +9,8 @@ class DatabaseSeeder extends Seeder
     public function run(): void
     {
         $this->call([
-            RolesAndPermissionsSeeder::class,
+            // RolesAndPermissionsSeeder::class,
+            ShieldSeeder::class,
             PermissionSeeder::class,
             DivisionSeeder::class,
             UserSeeder::class,
diff --git a/database/seeders/PermissionSeeder.php b/database/seeders/PermissionSeeder.php
index a042635..3cf86d0 100644
--- a/database/seeders/PermissionSeeder.php
+++ b/database/seeders/PermissionSeeder.php
@@ -23,9 +23,10 @@ class PermissionSeeder extends Seeder
             ->where('name', 'not like', '%Permission%')
             ->get());
 
-        // Bendahara: hanya kas + artikel sendiri
+        // Bendahara: hanya kas + iuran + artikel sendiri
         $bendahara->syncPermissions(Permission::where('name', 'like', '%CashRecord%')
             ->orWhere('name', 'like', '%CashCategory%')
+            ->orWhere('name', 'like', '%MemberDue%')
             ->orWhereIn('name', ['ViewAny:Post', 'View:Post', 'Create:Post', 'Update:Post', 'Delete:Post'])
             ->get());
 
diff --git a/database/seeders/RolesAndPermissionsSeeder.php b/database/seeders/RolesAndPermissionsSeeder.php
index 844d332..8ee7592 100644
--- a/database/seeders/RolesAndPermissionsSeeder.php
+++ b/database/seeders/RolesAndPermissionsSeeder.php
@@ -24,10 +24,10 @@ class RolesAndPermissionsSeeder extends Seeder
 
         // super_admin mendapat semua permission via Shield config
         $superAdmin = User::firstOrCreate(
-            ['email' => 'admin@persegi.id'],
+            ['email' => 'admin@admin.com'],
             [
                 'name'     => 'Super Admin',
-                'password' => bcrypt('password'),
+                'password' => bcrypt('admin'),
                 'phone'    => '08123456789',
                 'status'   => 'aktif',
             ]
diff --git a/database/seeders/ShieldSeeder.php b/database/seeders/ShieldSeeder.php
new file mode 100644
index 0000000..4c9237a
--- /dev/null
+++ b/database/seeders/ShieldSeeder.php
@@ -0,0 +1,207 @@
+<?php
+
+namespace Database\Seeders;
+
+use Illuminate\Database\Seeder;
+use Illuminate\Support\Facades\DB;
+use BezhanSalleh\FilamentShield\Support\Utils;
+use Spatie\Permission\PermissionRegistrar;
+
+class ShieldSeeder extends Seeder
+{
+    public function run(): void
+    {
+        app()[PermissionRegistrar::class]->forgetCachedPermissions();
+
+        $tenants = '[]';
+        $users = '[]';
+        $userTenantPivot = '[]';
+        $rolesWithPermissions = '[{"name":"super_admin","guard_name":"web","permissions":[]},{"name":"ketua","guard_name":"web","permissions":[]},{"name":"bendahara","guard_name":"web","permissions":[]},{"name":"pengurus","guard_name":"web","permissions":[]},{"name":"anggota","guard_name":"web","permissions":[]},{"name":"auditor","guard_name":"web","permissions":[]}]';
+        $directPermissions = '[{"name":"ViewAny:Activity","guard_name":"web"},{"name":"View:Activity","guard_name":"web"},{"name":"Create:Activity","guard_name":"web"},{"name":"Update:Activity","guard_name":"web"},{"name":"Delete:Activity","guard_name":"web"},{"name":"DeleteAny:Activity","guard_name":"web"},{"name":"Restore:Activity","guard_name":"web"},{"name":"ForceDelete:Activity","guard_name":"web"},{"name":"ForceDeleteAny:Activity","guard_name":"web"},{"name":"RestoreAny:Activity","guard_name":"web"},{"name":"Replicate:Activity","guard_name":"web"},{"name":"Reorder:Activity","guard_name":"web"},{"name":"ViewAny:Approval","guard_name":"web"},{"name":"View:Approval","guard_name":"web"},{"name":"Create:Approval","guard_name":"web"},{"name":"Update:Approval","guard_name":"web"},{"name":"Delete:Approval","guard_name":"web"},{"name":"DeleteAny:Approval","guard_name":"web"},{"name":"Restore:Approval","guard_name":"web"},{"name":"ForceDelete:Approval","guard_name":"web"},{"name":"ForceDeleteAny:Approval","guard_name":"web"},{"name":"RestoreAny:Approval","guard_name":"web"},{"name":"Replicate:Approval","guard_name":"web"},{"name":"Reorder:Approval","guard_name":"web"},{"name":"ViewAny:Audit","guard_name":"web"},{"name":"View:Audit","guard_name":"web"},{"name":"Create:Audit","guard_name":"web"},{"name":"Update:Audit","guard_name":"web"},{"name":"Delete:Audit","guard_name":"web"},{"name":"DeleteAny:Audit","guard_name":"web"},{"name":"Restore:Audit","guard_name":"web"},{"name":"ForceDelete:Audit","guard_name":"web"},{"name":"ForceDeleteAny:Audit","guard_name":"web"},{"name":"RestoreAny:Audit","guard_name":"web"},{"name":"Replicate:Audit","guard_name":"web"},{"name":"Reorder:Audit","guard_name":"web"},{"name":"ViewAny:CashCategory","guard_name":"web"},{"name":"View:CashCategory","guard_name":"web"},{"name":"Create:CashCategory","guard_name":"web"},{"name":"Update:CashCategory","guard_name":"web"},{"name":"Delete:CashCategory","guard_name":"web"},{"name":"DeleteAny:CashCategory","guard_name":"web"},{"name":"Restore:CashCategory","guard_name":"web"},{"name":"ForceDelete:CashCategory","guard_name":"web"},{"name":"ForceDeleteAny:CashCategory","guard_name":"web"},{"name":"RestoreAny:CashCategory","guard_name":"web"},{"name":"Replicate:CashCategory","guard_name":"web"},{"name":"Reorder:CashCategory","guard_name":"web"},{"name":"ViewAny:CashRecord","guard_name":"web"},{"name":"View:CashRecord","guard_name":"web"},{"name":"Create:CashRecord","guard_name":"web"},{"name":"Update:CashRecord","guard_name":"web"},{"name":"Delete:CashRecord","guard_name":"web"},{"name":"DeleteAny:CashRecord","guard_name":"web"},{"name":"Restore:CashRecord","guard_name":"web"},{"name":"ForceDelete:CashRecord","guard_name":"web"},{"name":"ForceDeleteAny:CashRecord","guard_name":"web"},{"name":"RestoreAny:CashRecord","guard_name":"web"},{"name":"Replicate:CashRecord","guard_name":"web"},{"name":"Reorder:CashRecord","guard_name":"web"},{"name":"ViewAny:ContactMessage","guard_name":"web"},{"name":"View:ContactMessage","guard_name":"web"},{"name":"Create:ContactMessage","guard_name":"web"},{"name":"Update:ContactMessage","guard_name":"web"},{"name":"Delete:ContactMessage","guard_name":"web"},{"name":"DeleteAny:ContactMessage","guard_name":"web"},{"name":"Restore:ContactMessage","guard_name":"web"},{"name":"ForceDelete:ContactMessage","guard_name":"web"},{"name":"ForceDeleteAny:ContactMessage","guard_name":"web"},{"name":"RestoreAny:ContactMessage","guard_name":"web"},{"name":"Replicate:ContactMessage","guard_name":"web"},{"name":"Reorder:ContactMessage","guard_name":"web"},{"name":"ViewAny:Division","guard_name":"web"},{"name":"View:Division","guard_name":"web"},{"name":"Create:Division","guard_name":"web"},{"name":"Update:Division","guard_name":"web"},{"name":"Delete:Division","guard_name":"web"},{"name":"DeleteAny:Division","guard_name":"web"},{"name":"Restore:Division","guard_name":"web"},{"name":"ForceDelete:Division","guard_name":"web"},{"name":"ForceDeleteAny:Division","guard_name":"web"},{"name":"RestoreAny:Division","guard_name":"web"},{"name":"Replicate:Division","guard_name":"web"},{"name":"Reorder:Division","guard_name":"web"},{"name":"ViewAny:MemberDue","guard_name":"web"},{"name":"View:MemberDue","guard_name":"web"},{"name":"Create:MemberDue","guard_name":"web"},{"name":"Update:MemberDue","guard_name":"web"},{"name":"Delete:MemberDue","guard_name":"web"},{"name":"DeleteAny:MemberDue","guard_name":"web"},{"name":"Restore:MemberDue","guard_name":"web"},{"name":"ForceDelete:MemberDue","guard_name":"web"},{"name":"ForceDeleteAny:MemberDue","guard_name":"web"},{"name":"RestoreAny:MemberDue","guard_name":"web"},{"name":"Replicate:MemberDue","guard_name":"web"},{"name":"Reorder:MemberDue","guard_name":"web"},{"name":"ViewAny:Post","guard_name":"web"},{"name":"View:Post","guard_name":"web"},{"name":"Create:Post","guard_name":"web"},{"name":"Update:Post","guard_name":"web"},{"name":"Delete:Post","guard_name":"web"},{"name":"DeleteAny:Post","guard_name":"web"},{"name":"Restore:Post","guard_name":"web"},{"name":"ForceDelete:Post","guard_name":"web"},{"name":"ForceDeleteAny:Post","guard_name":"web"},{"name":"RestoreAny:Post","guard_name":"web"},{"name":"Replicate:Post","guard_name":"web"},{"name":"Reorder:Post","guard_name":"web"},{"name":"ViewAny:User","guard_name":"web"},{"name":"View:User","guard_name":"web"},{"name":"Create:User","guard_name":"web"},{"name":"Update:User","guard_name":"web"},{"name":"Delete:User","guard_name":"web"},{"name":"DeleteAny:User","guard_name":"web"},{"name":"Restore:User","guard_name":"web"},{"name":"ForceDelete:User","guard_name":"web"},{"name":"ForceDeleteAny:User","guard_name":"web"},{"name":"RestoreAny:User","guard_name":"web"},{"name":"Replicate:User","guard_name":"web"},{"name":"Reorder:User","guard_name":"web"},{"name":"ViewAny:Vote","guard_name":"web"},{"name":"View:Vote","guard_name":"web"},{"name":"Create:Vote","guard_name":"web"},{"name":"Update:Vote","guard_name":"web"},{"name":"Delete:Vote","guard_name":"web"},{"name":"DeleteAny:Vote","guard_name":"web"},{"name":"Restore:Vote","guard_name":"web"},{"name":"ForceDelete:Vote","guard_name":"web"},{"name":"ForceDeleteAny:Vote","guard_name":"web"},{"name":"RestoreAny:Vote","guard_name":"web"},{"name":"Replicate:Vote","guard_name":"web"},{"name":"Reorder:Vote","guard_name":"web"},{"name":"ViewAny:Role","guard_name":"web"},{"name":"View:Role","guard_name":"web"},{"name":"Create:Role","guard_name":"web"},{"name":"Update:Role","guard_name":"web"},{"name":"Delete:Role","guard_name":"web"},{"name":"DeleteAny:Role","guard_name":"web"},{"name":"Restore:Role","guard_name":"web"},{"name":"ForceDelete:Role","guard_name":"web"},{"name":"ForceDeleteAny:Role","guard_name":"web"},{"name":"RestoreAny:Role","guard_name":"web"},{"name":"Replicate:Role","guard_name":"web"},{"name":"Reorder:Role","guard_name":"web"},{"name":"View:CashStatsWidget","guard_name":"web"},{"name":"View:StatsOverview","guard_name":"web"},{"name":"View:ActivityLogWidget","guard_name":"web"}]';
+
+        // 1. Seed tenants first (if present)
+        if (! blank($tenants) && $tenants !== '[]') {
+            static::seedTenants($tenants);
+        }
+
+        // 2. Seed roles with permissions
+        static::makeRolesWithPermissions($rolesWithPermissions);
+
+        // 3. Seed direct permissions
+        static::makeDirectPermissions($directPermissions);
+
+        // 4. Seed users with their roles/permissions (if present)
+        if (! blank($users) && $users !== '[]') {
+            static::seedUsers($users);
+        }
+
+        // 5. Seed user-tenant pivot (if present)
+        if (! blank($userTenantPivot) && $userTenantPivot !== '[]') {
+            static::seedUserTenantPivot($userTenantPivot);
+        }
+
+        $this->command->info('Shield Seeding Completed.');
+    }
+
+    protected static function seedTenants(string $tenants): void
+    {
+        if (blank($tenantData = json_decode($tenants, true))) {
+            return;
+        }
+
+        $tenantModel = '';
+        if (blank($tenantModel)) {
+            return;
+        }
+
+        foreach ($tenantData as $tenant) {
+            $tenantModel::firstOrCreate(
+                ['id' => $tenant['id']],
+                $tenant
+            );
+        }
+    }
+
+    protected static function seedUsers(string $users): void
+    {
+        if (blank($userData = json_decode($users, true))) {
+            return;
+        }
+
+        $userModel = 'App\Models\User';
+        $tenancyEnabled = false;
+
+        foreach ($userData as $data) {
+            // Extract role/permission data before creating user
+            $roles = $data['roles'] ?? [];
+            $permissions = $data['permissions'] ?? [];
+            $tenantRoles = $data['tenant_roles'] ?? [];
+            $tenantPermissions = $data['tenant_permissions'] ?? [];
+            unset($data['roles'], $data['permissions'], $data['tenant_roles'], $data['tenant_permissions']);
+
+            $user = $userModel::firstOrCreate(
+                ['email' => $data['email']],
+                $data
+            );
+
+            // Handle tenancy mode - sync roles/permissions per tenant
+            if ($tenancyEnabled && (! empty($tenantRoles) || ! empty($tenantPermissions))) {
+                foreach ($tenantRoles as $tenantId => $roleNames) {
+                    $contextId = $tenantId === '_global' ? null : $tenantId;
+                    setPermissionsTeamId($contextId);
+                    $user->syncRoles($roleNames);
+                }
+
+                foreach ($tenantPermissions as $tenantId => $permissionNames) {
+                    $contextId = $tenantId === '_global' ? null : $tenantId;
+                    setPermissionsTeamId($contextId);
+                    $user->syncPermissions($permissionNames);
+                }
+            } else {
+                // Non-tenancy mode
+                if (! empty($roles)) {
+                    $user->syncRoles($roles);
+                }
+
+                if (! empty($permissions)) {
+                    $user->syncPermissions($permissions);
+                }
+            }
+        }
+    }
+
+    protected static function seedUserTenantPivot(string $pivot): void
+    {
+        if (blank($pivotData = json_decode($pivot, true))) {
+            return;
+        }
+
+        $pivotTable = '';
+        if (blank($pivotTable)) {
+            return;
+        }
+
+        foreach ($pivotData as $row) {
+            $uniqueKeys = [];
+
+            if (isset($row['user_id'])) {
+                $uniqueKeys['user_id'] = $row['user_id'];
+            }
+
+            $tenantForeignKey = 'team_id';
+            if (! blank($tenantForeignKey) && isset($row[$tenantForeignKey])) {
+                $uniqueKeys[$tenantForeignKey] = $row[$tenantForeignKey];
+            }
+
+            if (! empty($uniqueKeys)) {
+                DB::table($pivotTable)->updateOrInsert($uniqueKeys, $row);
+            }
+        }
+    }
+
+    protected static function makeRolesWithPermissions(string $rolesWithPermissions): void
+    {
+        if (blank($rolePlusPermissions = json_decode($rolesWithPermissions, true))) {
+            return;
+        }
+
+        /** @var \Illuminate\Database\Eloquent\Model $roleModel */
+        $roleModel = Utils::getRoleModel();
+        /** @var \Illuminate\Database\Eloquent\Model $permissionModel */
+        $permissionModel = Utils::getPermissionModel();
+
+        $tenancyEnabled = false;
+        $teamForeignKey = 'team_id';
+
+        foreach ($rolePlusPermissions as $rolePlusPermission) {
+            $tenantId = $rolePlusPermission[$teamForeignKey] ?? null;
+
+            // Set tenant context for role creation and permission sync
+            if ($tenancyEnabled) {
+                setPermissionsTeamId($tenantId);
+            }
+
+            $roleData = [
+                'name' => $rolePlusPermission['name'],
+                'guard_name' => $rolePlusPermission['guard_name'],
+            ];
+
+            // Include tenant ID in role data (can be null for global roles)
+            if ($tenancyEnabled && ! blank($teamForeignKey)) {
+                $roleData[$teamForeignKey] = $tenantId;
+            }
+
+            $role = $roleModel::firstOrCreate($roleData);
+
+            if (! blank($rolePlusPermission['permissions'])) {
+                $permissionModels = collect($rolePlusPermission['permissions'])
+                    ->map(fn ($permission) => $permissionModel::firstOrCreate([
+                        'name' => $permission,
+                        'guard_name' => $rolePlusPermission['guard_name'],
+                    ]))
+                    ->all();
+
+                $role->syncPermissions($permissionModels);
+            }
+        }
+    }
+
+    public static function makeDirectPermissions(string $directPermissions): void
+    {
+        if (blank($permissions = json_decode($directPermissions, true))) {
+            return;
+        }
+
+        /** @var \Illuminate\Database\Eloquent\Model $permissionModel */
+        $permissionModel = Utils::getPermissionModel();
+
+        foreach ($permissions as $permission) {
+            if ($permissionModel::whereName($permission['name'])->doesntExist()) {
+                $permissionModel::create([
+                    'name' => $permission['name'],
+                    'guard_name' => $permission['guard_name'],
+                ]);
+            }
+        }
+    }
+}
diff --git a/database/seeders/UserSeeder.php b/database/seeders/UserSeeder.php
index cc8ef1a..d7d5a61 100644
--- a/database/seeders/UserSeeder.php
+++ b/database/seeders/UserSeeder.php
@@ -22,6 +22,19 @@ class UserSeeder extends Seeder
             ['name' => 'Nur Hidayah',    'email' => 'anggota2@persegi.id', 'role' => 'anggota',   'division' => 'Humas'],
         ];
 
+        // super_admin mendapat semua permission via Shield config
+        $superAdmin = User::firstOrCreate(
+            ['email' => 'admin@admin.com'],
+            [
+                'name'     => 'Super Admin',
+                'password' => bcrypt('admin'),
+                'phone'    => '08123456789',
+                'status'   => 'aktif',
+            ]
+        );
+
+        $superAdmin->assignRole('super_admin');
+
         foreach ($users as $data) {
             $user = User::firstOrCreate(
                 ['email' => $data['email']],