优化权限控制

web/backend/routers/auth.py

@@ -7,7 +7,7 @@ from sqlalchemy.orm import Session
 from ..database import get_db
 from ..models import User, AuditLog
 from ..security import verify_password, create_access_token
-from ..permissions import get_role_permissions, ROLE_LABELS
+from ..permissions import get_user_permissions, ROLE_LABELS
 from ..schemas import LoginRequest, TokenResponse
 from ..deps import get_current_user
 
@@ -23,7 +23,7 @@ def login(req: LoginRequest, db: Session = Depends(get_db)):
         raise HTTPException(status_code=403, detail="账号已禁用，请联系管理员")
 
     token = create_access_token({"sub": str(user.id), "role": user.role})
-    perms = get_role_permissions(user.role)
+    perms = get_user_permissions(user)
 
     # 审计
     db.add(AuditLog(user_id=user.id, username=user.username, action="login", target="auth"))
@@ -46,7 +46,7 @@ def me(current_user: User = Depends(get_current_user)):
         "role_label": ROLE_LABELS.get(current_user.role, current_user.role),
         "is_active": current_user.is_active,
         "remark": current_user.remark,
-        "permissions": get_role_permissions(current_user.role),
+        "permissions": get_user_permissions(current_user),
     }