feat(P15B-1,P15B-6): 完成请假V1闭环

client/src/auth/permissions.ts

@@ -1,4 +1,4 @@
-const EMPLOYEE_BASE_PERMISSIONS = [
+const EXPENSE_SELF_SERVICE_PERMISSIONS = [
   "expense.create",
   "expense.view_own",
   "expense.edit_own",
@@ -10,6 +10,17 @@ const EMPLOYEE_BASE_PERMISSIONS = [
   "expense.proxy_manage",
 ] as const;
 
+const LEAVE_SELF_SERVICE_PERMISSIONS = [
+  "leave.create",
+  "leave.view_own",
+  "leave.submit",
+] as const;
+
+const EMPLOYEE_BASE_PERMISSIONS = [
+  ...EXPENSE_SELF_SERVICE_PERMISSIONS,
+  ...LEAVE_SELF_SERVICE_PERMISSIONS,
+] as const;
+
 const ROLE_PERMISSIONS: Record<string, readonly string[]> = {
   employee: EMPLOYEE_BASE_PERMISSIONS,
   manager: [
@@ -17,6 +28,7 @@ const ROLE_PERMISSIONS: Record<string, readonly string[]> = {
     "expense.approve",
     "expense.transfer",
     "expense.view_all",
+    "leave.approve",
     "report.dashboard.view",
     "budget.view",
     "budget.manage",
@@ -26,6 +38,8 @@ const ROLE_PERMISSIONS: Record<string, readonly string[]> = {
     "expense.approve",
     "expense.transfer",
     "expense.view_all",
+    "leave.approve",
+    "leave.view_all",
     "report.dashboard.view",
     "budget.view",
   ],
@@ -57,16 +71,17 @@ const ROLE_PERMISSIONS: Record<string, readonly string[]> = {
   ],
   administration: [
     "expense.proxy_submit",
-    "expense.create",
-    "expense.view_own",
-    "expense.edit_own",
-    "expense.delete_own",
-    "expense.submit",
-    "expense.withdraw",
-    "invoice.upload",
-    "invoice.view_own",
+    ...EMPLOYEE_BASE_PERMISSIONS,
+  ],
+  hr: [
+    ...LEAVE_SELF_SERVICE_PERMISSIONS,
+    "leave.view_all",
+    "leave.manage",
+    "system.users",
+    "system.users_sensitive",
+    "expense.view_all",
+    "report.dashboard.view",
   ],
-  hr: ["system.users", "system.users_sensitive", "expense.view_all", "report.dashboard.view"],
   admin: ["*"],
 };