feat(08-05-business-detail-routing): 完成采购与资产独立路由

client/tests/e2e/permission-direct-access.spec.ts

@@ -396,6 +396,7 @@ test.describe("R3 权限直连审计", () => {
       "/ap-operations",
       "/system/integrations/erp",
       "/payment-batches",
+      "/assets/new",
     ]);
 
     await expectForbiddenRoutes(browser, MANAGER, [
@@ -503,6 +504,10 @@ test.describe("R3 权限直连审计", () => {
     ]);
   });
 
+  test("资产创建路由只允许 asset.manage 角色直连", async ({ browser }) => {
+    await expectDirectRoutesNotForbidden(browser, FINANCE_MGR, ["/assets/new"]);
+  });
+
   test("后端直连接口按权限拒绝或限制范围", async () => {
     const clients: AuthenticatedApiClient[] = [];
     const employee = await createAuthenticatedApiClient(EMPLOYEE);