feat(P20T2-1,P20T2-2,P20T2-3): 卡授权/交易/支付标记/发票绑定/ERP出站后端

server/tests/unit/constants/permissions.test.js

@@ -53,6 +53,14 @@ describe("Permission Constants", () => {
     expect(hasPermission(resolvePermissionsForRoles(["administration"]), "travel.manage")).toBe(true);
   });
 
+  it("grants travel.payment.manage only to configured finance and administration roles", () => {
+    expect(hasPermission(resolvePermissionsForRoles(["finance"]), "travel.payment.manage")).toBe(true);
+    expect(hasPermission(resolvePermissionsForRoles(["finance_mgr"]), "travel.payment.manage")).toBe(true);
+    expect(hasPermission(resolvePermissionsForRoles(["administration"]), "travel.payment.manage")).toBe(true);
+    expect(hasPermission(resolvePermissionsForRoles(["manager"]), "travel.payment.manage")).toBe(false);
+    expect(hasPermission(resolvePermissionsForRoles(["employee"]), "travel.payment.manage")).toBe(false);
+  });
+
   it("grants ai.assist only to finance manager and admin", () => {
     expect(hasPermission(resolvePermissionsForRoles(["finance_mgr"]), "ai.assist")).toBe(true);
     expect(hasPermission(resolvePermissionsForRoles(["finance"]), "ai.assist")).toBe(false);