fix: 用专用权限收窄经理 AP 访问（09-07-manager-ap-access-scope）

server/src/constants/permissions.js

@@ -162,6 +162,7 @@ const ROLE_PERMISSIONS = {
     "payment.batch.review",
   ],
   ceo: [
+    "finance.ledger.view",
     ...EMPLOYEE_BASE_PERMISSIONS,
     ...PROCUREMENT_SELF_SERVICE_PERMISSIONS,
     ...MASTERDATA_VIEW_PERMISSIONS,
@@ -180,6 +181,7 @@ const ROLE_PERMISSIONS = {
     "payment.batch.review",
   ],
   finance: [
+    "finance.ledger.view",
     ...EMPLOYEE_BASE_PERMISSIONS,
     ...MASTERDATA_VIEW_PERMISSIONS,
     "invoice.manage",
@@ -200,6 +202,7 @@ const ROLE_PERMISSIONS = {
     "payroll.manage",
   ],
   finance_mgr: [
+    "finance.ledger.view",
     ...EMPLOYEE_BASE_PERMISSIONS,
     ...MASTERDATA_MANAGE_PERMISSIONS,
     "invoice.manage",