-- Controle RH: permitir print e gravacao de tela no app Android (FLAG_SECURE).
-- Execute no MySQL apos o schema base de tenants.

SET NAMES utf8mb4;

-- 1 = colaboradores podem tirar print / gravar tela; 0 = bloqueado (padrao)
ALTER TABLE `tenants`
  ADD COLUMN `app_screen_capture_allowed` TINYINT(1) NOT NULL DEFAULT 0
  COMMENT 'RH: 1=permite print/gravacao de tela no app, 0=bloqueado';

-- Painel RH: config_app.php (formulario) e GET/PATCH manager/tenant_app_features.php
-- App colaborador: GET employee/app_features.php → screen_capture_allowed
