feat: 完成P6-P8后端能力与P9路由重构（V1-V2,D1,D3,B1-B2,B4,I1-I4,P9A2-P9A3）

server/src/constants/permissions.js

@@ -12,11 +12,29 @@ const EMPLOYEE_BASE_PERMISSIONS = [
 
 const ROLE_PERMISSIONS = {
   employee: EMPLOYEE_BASE_PERMISSIONS,
-  manager: [...EMPLOYEE_BASE_PERMISSIONS, "expense.approve", "expense.transfer", "expense.view_all"],
-  ceo: [...EMPLOYEE_BASE_PERMISSIONS, "expense.approve", "expense.transfer", "expense.view_all"],
+  manager: [
+    ...EMPLOYEE_BASE_PERMISSIONS,
+    "expense.approve",
+    "expense.transfer",
+    "expense.view_all",
+    "report.dashboard.view",
+    "budget.view",
+    "budget.manage",
+  ],
+  ceo: [
+    ...EMPLOYEE_BASE_PERMISSIONS,
+    "expense.approve",
+    "expense.transfer",
+    "expense.view_all",
+    "report.dashboard.view",
+    "budget.view",
+  ],
   finance: [
     ...EMPLOYEE_BASE_PERMISSIONS,
     "invoice.manage",
+    "invoice.verify",
+    "report.dashboard.view",
+    "budget.view",
     "expense.approve",
     "expense.finance.pay",
     "expense.view_all",
@@ -24,6 +42,12 @@ const ROLE_PERMISSIONS = {
   finance_mgr: [
     ...EMPLOYEE_BASE_PERMISSIONS,
     "invoice.manage",
+    "invoice.verify",
+    "report.dashboard.view",
+    "budget.view",
+    "budget.manage",
+    "integration.manage",
+    "notification.channel.manage",
     "expense.approve",
     "expense.finance.pay",
     "expense.view_all",
@@ -42,7 +66,7 @@ const ROLE_PERMISSIONS = {
     "invoice.upload",
     "invoice.view_own",
   ],
-  hr: ["system.users", "system.users_sensitive", "expense.view_all"],
+  hr: ["system.users", "system.users_sensitive", "expense.view_all", "report.dashboard.view"],
   admin: ["*"],
 };