优化客服权限

apps/backend/src/routes/admin/kuaishou-industry.ts

@@ -81,7 +81,7 @@ router.post(
 
 router.post(
   '/kuaishou-industry/vouchers/check-available',
-  requireAdminRoles(['admin', 'operator']),
+  requireAdminRoles(['admin', 'operator', 'support']),
   createJsonHandler(
     (req) =>
       checkAdminKuaishouIndustryVoucherAvailable(
@@ -98,7 +98,7 @@ router.post(
 
 router.post(
   '/kuaishou-industry/vouchers/reverse',
-  requireAdminRoles(['admin', 'operator']),
+  requireAdminRoles(['admin', 'operator', 'support']),
   createJsonHandler(
     (req) =>
       reverseAdminKuaishouIndustryVoucher(req.body as AdminKuaishouIndustryVoucherReverseRouteBody),
@@ -113,7 +113,7 @@ router.post(
 
 router.post(
   '/kuaishou-industry/vouchers/consume',
-  requireAdminRoles(['admin', 'operator']),
+  requireAdminRoles(['admin', 'operator', 'support']),
   createJsonHandler(
     (req) =>
       consumeAdminKuaishouIndustryVoucherByCode(
@@ -130,7 +130,7 @@ router.post(
 
 router.post(
   '/kuaishou-industry/vouchers/resend-code',
-  requireAdminRoles(['admin', 'operator']),
+  requireAdminRoles(['admin', 'operator', 'support']),
   createJsonHandler(
     (req) =>
       resendAdminKuaishouIndustryVoucherCode(

apps/backend/src/routes/admin/orders.ts

@@ -34,7 +34,7 @@ router.get('/orders/:orderId', createJsonHandler(
 
 router.post(
   '/orders/:orderId/kuaishou-industry/resend-code',
-  requireAdminRoles(['admin', 'operator']),
+  requireAdminRoles(['admin', 'operator', 'support']),
   createJsonHandler(
     (req) =>
       resendAdminOrderKuaishouIndustryVoucherCodes(

apps/backend/src/routes/admin/platform-config.ts

@@ -10,9 +10,9 @@ import fulfillmentRoutingRouter from "./platform-config/fulfillment-routing.js";
 
 const router = Router();
 
+router.use("/platform-config", kuaishouIndustryRouter);
 router.use("/platform-config", requireAdminRoles(["admin"]));
 router.use("/platform-config", notificationsRouter);
-router.use("/platform-config", kuaishouIndustryRouter);
 router.use("/platform-config", kuaishouFeifeiRouter);
 router.use("/platform-config", ninetyoneRouter);
 router.use("/platform-config", fulfillmentRoutingRouter);

apps/backend/src/routes/admin/platform-config/kuaishou-industry.ts

@@ -10,13 +10,14 @@ import type {
   AdminKuaishouIndustryAuthorizationCodeRouteBody,
   AdminKuaishouIndustrySourceConfigRouteBody,
 } from '../../../types/admin/route-inputs.js'
-import { createJsonHandler } from '../session.js'
+import { createJsonHandler, requireAdminRoles } from '../session.js'
 import type { JsonRecord } from '../../../types/json.js'
 
 const router = Router()
 
 router.get(
   '/kuaishou-industry-source',
+  requireAdminRoles(['admin', 'operator', 'support']),
   createJsonHandler(() => getAdminKuaishouIndustrySourceConfig(), {
     successMessage: 'ok',
     errorMessage: '读取快手行业电子凭证配置失败',
@@ -26,6 +27,7 @@ router.get(
 
 router.post(
   '/kuaishou-industry-source',
+  requireAdminRoles(['admin']),
   createJsonHandler(
     (req) =>
       updateAdminKuaishouIndustrySourceConfig(
@@ -57,6 +59,7 @@ router.post(
 
 router.post(
   '/kuaishou-industry-source/refresh-token',
+  requireAdminRoles(['admin']),
   createJsonHandler((req) => refreshAdminKuaishouIndustryAccessToken(req.body as JsonRecord), {
     successMessage: '快手行业电子凭证 accessToken 已刷新',
     errorMessage: '刷新快手行业电子凭证 accessToken 失败',
@@ -80,6 +83,7 @@ router.post(
 
 router.post(
   '/kuaishou-industry-source/exchange-code',
+  requireAdminRoles(['admin']),
   createJsonHandler(
     (req) =>
       exchangeAdminKuaishouIndustryAuthorizationCode(

apps/backend/src/routes/admin/tasks.ts

@@ -149,7 +149,7 @@ router.post(
 
 router.post(
   '/tasks/:taskId/kuaishou-industry/resend-code',
-  requireAdminRoles(['admin', 'operator']),
+  requireAdminRoles(['admin', 'operator', 'support']),
   createJsonHandler(
     (req) =>
       resendAdminTaskKuaishouIndustryVoucherCode(getTaskId(req), req.adminSession || null),
@@ -164,7 +164,7 @@ router.post(
 
 router.post(
   '/tasks/:taskId/kuaishou-industry/consume',
-  requireAdminRoles(['admin', 'operator']),
+  requireAdminRoles(['admin', 'operator', 'support']),
   createJsonHandler(
     (req) =>
       consumeAdminTaskKuaishouIndustryVoucher(