修复非参与人报销只读边界（08-28-reimbursement-nonparticipant-readonly-projection）

server/src/routes/invoicePool.js

@@ -1079,8 +1079,7 @@ async function invoicePoolRoutes(fastify) {
           const isOwn =
             reimbursement.owner_id === request.employee.id ||
             reimbursement.submitter_id === request.employee.id;
-          const canViewAll = fastify.hasPermission(request.employee, "expense.view_all");
-          if (!isOwn && !canViewAll) {
+          if (!isOwn) {
             throw new AppError({
               code: "PERM_001",
               message: "无权限",
@@ -1591,8 +1590,7 @@ async function invoicePoolRoutes(fastify) {
             const isOwn =
               reimbursement.owner_id === request.employee.id ||
               reimbursement.submitter_id === request.employee.id;
-            const canViewAll = fastify.hasPermission(request.employee, "expense.view_all");
-            if (!isOwn && !canViewAll) {
+            if (!isOwn) {
               throw new AppError({
                 code: "PERM_001",
                 message: "无权限",