feat: implement LMS core (CMS, Courses, Enrollment, Progress, Auth) (Admin + API)

apps/common/api/auto_router.py

@@ -0,0 +1,9 @@
+def auto_register(router, viewsets: dict):
+    """
+    viewsets = {
+        "articles": ArticleViewSet,
+        "courses": CourseViewSet,
+    }
+    """
+    for prefix, viewset in viewsets.items():
+        router.register(prefix, viewset, basename=prefix)

apps/common/api/base_serializer.py

@@ -0,0 +1,11 @@
+from rest_framework.serializers import ModelSerializer
+
+class BaseModelSerializer(ModelSerializer):
+    """
+    Base Serializer สำหรับ CMS‑like API
+    - ใช้ fields = "__all__" เป็น default
+    """
+
+    class Meta:
+        abstract = True
+        fields = "__all__"

apps/common/api/base_viewset.py

@@ -0,0 +1,29 @@
+from rest_framework.viewsets import ModelViewSet
+from rest_framework.permissions import IsAuthenticated
+from rest_framework.filters import SearchFilter, OrderingFilter
+from django_filters.rest_framework import DjangoFilterBackend
+
+class BaseModelViewSet(ModelViewSet):
+    """
+    CMS-like Base ViewSet
+    - CRUD อัตโนมัติ
+    - Pagination (จาก settings.py)
+    - Filter / Search / Ordering
+    - Permission กลาง
+    """
+
+    # default permission (override ได้)
+    permission_classes = [IsAuthenticated]
+
+    # filter backend มาตรฐานแบบ CMS
+    filter_backends = [
+        DjangoFilterBackend,
+        SearchFilter,
+        OrderingFilter,
+    ]
+
+    # ค่า default (override ต่อ model)
+    filterset_fields = "__all__"
+    search_fields = []
+    ordering_fields = "__all__"
+    ordering = ["-id"]

apps/common/api/permissions.py

@@ -0,0 +1,12 @@
+from rest_framework.permissions import BasePermission, SAFE_METHODS
+
+class IsStaffOrReadOnly(BasePermission):
+    """
+    - อ่านได้ทุกคน
+    - เขียนได้เฉพาะ staff
+    """
+
+    def has_permission(self, request, view):
+        if request.method in SAFE_METHODS:
+            return True
+        return request.user and request.user.is_staff