R18-1/R18-3: 接入企业微信入口绑定与免登回退

server/src/constants/permissions.js

@@ -29,6 +29,7 @@ const TRAVEL_SELF_SERVICE_PERMISSIONS = [
 ];
 
 const ASSET_SELF_SERVICE_PERMISSIONS = ["asset.view_own"];
+const PROJECT_SELF_SERVICE_PERMISSIONS = ["project.view_own"];
 
 const MASTERDATA_VIEW_PERMISSIONS = ["masterdata.view"];
 const MASTERDATA_MANAGE_PERMISSIONS = ["masterdata.manage"];
@@ -37,6 +38,7 @@ const EMPLOYEE_BASE_PERMISSIONS = [
   ...EXPENSE_SELF_SERVICE_PERMISSIONS,
   ...LEAVE_SELF_SERVICE_PERMISSIONS,
   ...TRAVEL_SELF_SERVICE_PERMISSIONS,
+  ...PROJECT_SELF_SERVICE_PERMISSIONS,
 ];
 
 const ENTITY_PERMISSION_MAP = {
@@ -102,6 +104,11 @@ const ENTITY_PERMISSION_MAP = {
     approve: "travel.approve",
     manage: "travel.manage",
   },
+  project: {
+    view_own: "project.view_own",
+    view_all: "project.view_all",
+    manage: "project.manage",
+  },
 };
 
 const ROLE_PERMISSIONS = {
@@ -123,8 +130,13 @@ const ROLE_PERMISSIONS = {
     "travel.view_all",
     "asset.view_all",
     "report.dashboard.view",
+    "project.view_all",
     "budget.view",
+    "project.view_all",
+    "project.manage",
     "budget.manage",
+    "project.view_all",
+    "project.manage",
   ],
   ceo: [
     ...EMPLOYEE_BASE_PERMISSIONS,
@@ -187,6 +199,7 @@ const ROLE_PERMISSIONS = {
     "system.audit.view",
     "payment.batch.manage",
     "risk.review.manage",
+    "project.view_all",
   ],
   administration: [
     "expense.proxy_submit",
@@ -199,6 +212,8 @@ const ROLE_PERMISSIONS = {
     "asset.view_all",
     "asset.manage",
     "asset.transfer",
+    "project.view_all",
+    "project.manage",
   ],
   hr: [
     ...LEAVE_SELF_SERVICE_PERMISSIONS,