feat(consignment): 新增和平精英寄卖库存管理、定向收集审核与工单智能匹配履约

apps/backend/src/routes/admin/session.ts

@@ -84,13 +84,17 @@ export function requireAdminPermission(permission: string) {
   return (req: Request, res: Response, next: NextFunction): void => {
     try {
       const session = getRequiredAdminSession(req)
-      if (!session.permissions.includes(String(permission || '').trim())) {
-        throw createHttpError('当前账号没有此操作权限', {
-          statusCode: 403,
-          errorCode: 'admin_permission_denied',
-        })
+      if (
+        session.role === 'admin' ||
+        session.permissions.includes(String(permission || '').trim())
+      ) {
+        next()
+        return
       }
-      next()
+      throw createHttpError('当前账号没有此操作权限', {
+        statusCode: 403,
+        errorCode: 'admin_permission_denied',
+      })
     } catch (error) {
       sendRouteError(res, error, '后台鉴权失败', '[admin/auth/permission]')
     }
@@ -102,6 +106,7 @@ export function requireAnyAdminPermission(permissions: string[]) {
     try {
       const session = getRequiredAdminSession(req)
       if (
+        session.role === 'admin' ||
         permissions.some((permission) =>
           session.permissions.includes(String(permission || '').trim()),
         )