feat(auth): wire permission gating through menu, routes and actions

Browse Source

The store's can()/useCan() helpers existed but were unused. Now:
- src/auth/permissions.ts PERM catalog mirrors backend keys
- every nav item carries a permission; sidebar filter reuses can()
- requirePermission() beforeLoad guard on all child routes (direct URLs
  redirect home when the session lacks the key)
- useCan() hides/disables mutation buttons: moderation actions,
  retranslate, robot-author edit/pause, category + locale CRUD, and the
  reserved-SID assign path (admin:sid:override hint)
- 403 responses toast 无权限执行此操作; can() unit tests added

Co-Authored-By: Claude Fable 5 <[email protected]>

...

This commit is contained in:

kongkx

2026-07-12 06:42:31 +08:00

co-authored by Claude Fable 5

parent 6ed8de4de6

commit 46056ae4b0

26 changed files with 1480 additions and 133 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download Patch File Download Diff File Expand all files Collapse all files

src/api/types.gen.ts

+1192 -44

File diff suppressed because it is too large Load Diff