fix(access-control): dynamic platform category columns, atomic permission group delete

Author: waleedlatif1

apps/sim/app/api/permission-groups/[id]/route.ts

@@ -252,8 +252,10 @@ export async function DELETE(req: NextRequest, { params }: { params: Promise<{ i
       return NextResponse.json({ error: 'Admin or owner permissions required' }, { status: 403 })
     }
 
-    await db.delete(permissionGroupMember).where(eq(permissionGroupMember.permissionGroupId, id))
-    await db.delete(permissionGroup).where(eq(permissionGroup.id, id))
+    await db.transaction(async (tx) => {
+      await tx.delete(permissionGroupMember).where(eq(permissionGroupMember.permissionGroupId, id))
+      await tx.delete(permissionGroup).where(eq(permissionGroup.id, id))
+    })
 
     logger.info('Deleted permission group', { permissionGroupId: id, userId: session.user.id })
 

apps/sim/ee/access-control/components/access-control.tsx

@@ -449,7 +449,11 @@ export function AccessControl() {
       ['Settings Tabs', 'Logs'],
     ]
 
-    return categoryGroups.map((column) =>
+    const assignedCategories = new Set(categoryGroups.flat())
+    const unassigned = Object.keys(platformCategories).filter((c) => !assignedCategories.has(c))
+    const groups = unassigned.length > 0 ? [...categoryGroups, unassigned] : categoryGroups
+
+    return groups.map((column) =>
       column
         .map((category) => ({
           category,