R36-4 放开跨域转审并同步回归

server/tests/unit/routes/workflow.permissions.test.js

@@ -55,7 +55,7 @@ describe("Workflow Route Permissions", () => {
     expect(actions).toEqual(["approve", "reject", "return"]);
   });
 
-  it("keeps transfer action limited to reimbursement tasks", () => {
+  it("allows transfer on approval tasks when actor also has expense.transfer", () => {
     const reimbursementActions = listAllowedActionsForTask(
       { employee: { permissionCodes: ["expense.approve", "expense.transfer"] } },
       {
@@ -72,8 +72,39 @@ describe("Workflow Route Permissions", () => {
       },
       true,
     );
+    const purchaseActions = listAllowedActionsForTask(
+      { employee: { permissionCodes: ["procurement.approve", "expense.transfer"] } },
+      {
+        status: "pending",
+        workflow_instance: { entity_type: "purchase_request" },
+      },
+      true,
+    );
+    const travelActions = listAllowedActionsForTask(
+      { employee: { permissionCodes: ["travel.approve", "expense.transfer"] } },
+      {
+        status: "pending",
+        workflow_instance: { entity_type: "travel_request" },
+      },
+      true,
+    );
 
     expect(reimbursementActions).toContain("transfer");
-    expect(leaveActions).not.toContain("transfer");
+    expect(leaveActions).toContain("transfer");
+    expect(purchaseActions).toContain("transfer");
+    expect(travelActions).toContain("transfer");
+  });
+
+  it("does not allow transfer without matching approve permission", () => {
+    const actions = listAllowedActionsForTask(
+      { employee: { permissionCodes: ["expense.transfer"] } },
+      {
+        status: "pending",
+        workflow_instance: { entity_type: "leave" },
+      },
+      true,
+    );
+
+    expect(actions).toEqual([]);
   });
 });