feat(P17B-1,P17B-2): 补齐采购预算闭环与归档模型接口

server/src/routes/masterDataSuppliers.js

@@ -159,7 +159,11 @@ async function ensureLegalEntityAvailable(tx, legalEntityId) {
 function assertMasterDataViewPermission(fastify, request) {
   const canView =
     fastify.hasPermission(request.employee, "masterdata.view") ||
-    fastify.hasPermission(request.employee, "masterdata.manage");
+    fastify.hasPermission(request.employee, "masterdata.manage") ||
+    fastify.hasPermission(request.employee, "procurement.create") ||
+    fastify.hasPermission(request.employee, "procurement.view_own") ||
+    fastify.hasPermission(request.employee, "procurement.view_all") ||
+    fastify.hasPermission(request.employee, "procurement.manage");
 
   if (!canView) {
     throw new AppError({