完善角色权限与数据隔离

server/internal/handler/auth.go

@@ -88,6 +88,19 @@ func (h *AuthHandler) Me(c *gin.Context) {
 	})
 }
 
+// MePermissions 当前登录用户的权限码列表（供前端按钮控制）。
+func (h *AuthHandler) MePermissions(c *gin.Context) {
+	perms := middleware.GetPermissions(c)
+	codes := make([]string, 0, len(perms))
+	for k := range perms {
+		codes = append(codes, k)
+	}
+	middleware.JSON(c, gin.H{
+		"role":        middleware.GetRole(c),
+		"permissions": codes,
+	})
+}
+
 type UpdatePresenceReq struct {
 	Status string `json:"status" binding:"required"`
 }