fix: 用专用权限收窄经理 AP 访问（09-07-manager-ap-access-scope）

server/src/constants/permissions.js

@@ -162,6 +162,7 @@ const ROLE_PERMISSIONS = {
     "payment.batch.review",
   ],
   ceo: [
+    "finance.ledger.view",
     ...EMPLOYEE_BASE_PERMISSIONS,
     ...PROCUREMENT_SELF_SERVICE_PERMISSIONS,
     ...MASTERDATA_VIEW_PERMISSIONS,
@@ -180,6 +181,7 @@ const ROLE_PERMISSIONS = {
     "payment.batch.review",
   ],
   finance: [
+    "finance.ledger.view",
     ...EMPLOYEE_BASE_PERMISSIONS,
     ...MASTERDATA_VIEW_PERMISSIONS,
     "invoice.manage",
@@ -200,6 +202,7 @@ const ROLE_PERMISSIONS = {
     "payroll.manage",
   ],
   finance_mgr: [
+    "finance.ledger.view",
     ...EMPLOYEE_BASE_PERMISSIONS,
     ...MASTERDATA_MANAGE_PERMISSIONS,
     "invoice.manage",

server/src/routes/apOperations.js

@@ -10,7 +10,7 @@ const {
   listFinanceLedger,
 } = require("../services/financeLedger");
 
-const FINANCE_LEDGER_PERMISSION_CODES = ["payment.batch.manage", "payment.batch.review", "risk.review.manage", "expense.finance.pay"];
+const FINANCE_LEDGER_PERMISSION_CODES = ["finance.ledger.view"];
 
 const FINANCE_LEDGER_QUERY_SCHEMA = z.object({
   page: z.coerce.number().int().min(1).optional(),

server/src/services/workspaceSettings.js

@@ -101,7 +101,7 @@ const NAVIGATION_REGISTRY = Object.freeze({
   travelRequests: { key: "travelRequests", label: "差旅申请", icon: "flight", href: "/travel-requests", anyOf: ["travel.view_all", "travel.manage", "travel.payment.manage"] },
   budgets: { key: "budgets", label: "预算管理", icon: "account_balance", href: "/budgets", anyOf: ["budget.view", "budget.manage"] },
   paymentBatches: { key: "paymentBatches", label: "付款", icon: "payments", href: "/payment-batches", anyOf: ["payment.batch.manage", "risk.review.manage", "payment.batch.review"], featureFlagKey: FEATURE_FLAG_KEYS.paymentBatch },
-  apOperations: { key: "apOperations", label: "应付账款", icon: "account_balance_wallet", href: "/ap-operations", anyOf: ["payment.batch.manage", "risk.review.manage", "payment.batch.review"], featureFlagKey: FEATURE_FLAG_KEYS.paymentBatch },
+  apOperations: { key: "apOperations", label: "应付账款", icon: "account_balance_wallet", href: "/ap-operations", anyOf: ["finance.ledger.view"], featureFlagKey: FEATURE_FLAG_KEYS.paymentBatch },
   invoicePool: { key: "invoicePool", label: "票据", icon: "receipt_long", href: "/invoice-pool", anyOf: ["invoice.manage"] },
   inventoryChecks: { key: "inventoryChecks", label: "资产盘点", icon: "inventory", href: "/inventory-checks", anyOf: ["asset.inventory"] },
   cutover: { key: "cutover", label: "切换控制台", icon: "swap_calls", href: "/system/cutover", anyOf: ["system.settings"], featureFlagKey: FEATURE_FLAG_KEYS.cutoverConsole },