完善角色权限与数据隔离

server/internal/handler/settings.go

@@ -359,7 +359,7 @@ type updateSettingsReq struct {
 }
 
 func (h *SettingsHandler) Update(c *gin.Context) {
-	if !middleware.HasAnyRole(c, "admin") {
+	if !middleware.HasPermission(c, "settings.basic") {
 		c.JSON(http.StatusForbidden, gin.H{"code": 403, "message": "仅租户管理员可修改设置"})
 		return
 	}