ATTV1 实现考勤统一入口与企微同步

client/src/auth/permissions.ts

@@ -16,6 +16,12 @@ const LEAVE_SELF_SERVICE_PERMISSIONS = [
   "leave.submit",
 ] as const;
 
+const ATTENDANCE_SELF_SERVICE_PERMISSIONS = [
+  "attendance.create",
+  "attendance.view_own",
+  "attendance.submit",
+] as const;
+
 const PROCUREMENT_SELF_SERVICE_PERMISSIONS = [
   "procurement.create",
   "procurement.view_own",
@@ -37,6 +43,7 @@ const MASTERDATA_MANAGE_PERMISSIONS = ["masterdata.manage"] as const;
 const EMPLOYEE_BASE_PERMISSIONS = [
   ...EXPENSE_SELF_SERVICE_PERMISSIONS,
   ...LEAVE_SELF_SERVICE_PERMISSIONS,
+  ...ATTENDANCE_SELF_SERVICE_PERMISSIONS,
   ...TRAVEL_SELF_SERVICE_PERMISSIONS,
   ...PROJECT_SELF_SERVICE_PERMISSIONS,
 ] as const;
@@ -55,6 +62,8 @@ const ROLE_PERMISSIONS: Record<string, readonly string[]> = {
     "expense.view_all",
     "leave.approve",
     "leave.view_all",
+    "attendance.approve",
+    "attendance.view_all",
     "procurement.approve",
     "procurement.view_all",
     "travel.approve",
@@ -75,6 +84,8 @@ const ROLE_PERMISSIONS: Record<string, readonly string[]> = {
     "expense.view_all",
     "leave.approve",
     "leave.view_all",
+    "attendance.approve",
+    "attendance.view_all",
     "procurement.approve",
     "procurement.view_all",
     "travel.approve",
@@ -98,6 +109,7 @@ const ROLE_PERMISSIONS: Record<string, readonly string[]> = {
     "travel.view_all",
     "travel.payment.manage",
     "asset.view_all",
+    "attendance.view_all",
   ],
   finance_mgr: [
     ...EMPLOYEE_BASE_PERMISSIONS,
@@ -128,6 +140,9 @@ const ROLE_PERMISSIONS: Record<string, readonly string[]> = {
     "payment.batch.manage",
     "risk.review.manage",
     "project.view_all",
+    "attendance.view_all",
+    "attendance.manage",
+    "attendance.sync",
   ],
   administration: [
     "expense.proxy_submit",
@@ -142,11 +157,18 @@ const ROLE_PERMISSIONS: Record<string, readonly string[]> = {
     "asset.transfer",
     "project.view_all",
     "project.manage",
+    "attendance.view_all",
+    "attendance.manage",
   ],
   hr: [
     ...LEAVE_SELF_SERVICE_PERMISSIONS,
+    ...ATTENDANCE_SELF_SERVICE_PERMISSIONS,
     "leave.view_all",
     "leave.manage",
+    "attendance.approve",
+    "attendance.view_all",
+    "attendance.manage",
+    "attendance.sync",
     "system.users",
     "system.users_sensitive",
     "expense.view_all",
@@ -158,6 +180,7 @@ const ROLE_PERMISSIONS: Record<string, readonly string[]> = {
 export const BUSINESS_APPROVAL_PERMISSIONS = [
   "expense.approve",
   "leave.approve",
+  "attendance.approve",
   "procurement.approve",
   "travel.approve",
 ] as const;