wangsli
1f8d5b658a
汇总已落盘的借款本金与还款、兼容历史编号的周期化编号、付款责任与回单核验、报销进度和排序、PWA/采购事务、错误原因与日期校验及ERP退役。 统一共享预算池锁序和锁后判断，恢复差旅原预算选择，补原因码固定夹具及反向完整性检查。 纳入配套迁移、测试、受管QA、分层验收合同、规约及任务记录；原始证据留在ignored artifacts。 关联任务：09-17-company-loan-principal-repayment、09-17-erp-exclusive-retirement、09-18-reimbursement-periodic-numbering、09-08-reimbursement-payment-closeout、09-18-local-concurrency-product-fixes、09-19-budget-pool-concurrency、09-05-error-explainability-payment-readiness。 预算补审由Claude定向验证2文件928项通过，原4446/28及r6结果仍仅对应各自历史输入；本轮未重跑测试。 完整新候选门禁、R1真实入口接入与12项公网义务仍开放。生产编号未启用、差旅仍冻结；不推送、不部署，不宣称发布资格。
40 行
1.8 KiB
JSON
40 行
1.8 KiB
JSON
{
|
|
"id": "manager-ap-access-scope",
|
|
"name": "manager-ap-access-scope",
|
|
"title": "经理 AP 财务台账与付款汇总访问收紧",
|
|
"description": "使用 finance.ledger.view 收紧 AP 全量读取，仅 finance/finance_mgr 授予，保留 admin 通配；CEO/经理审批与付款复核、其他 view_all 和导出授权不变。实现已复核，生产发布单独验收。",
|
|
"status": "in_progress",
|
|
"dev_type": null,
|
|
"scope": "AP-only 专用读取权限、对应前后端投影和权限验证",
|
|
"package": null,
|
|
"priority": "P2",
|
|
"creator": "shunli",
|
|
"assignee": "shunli",
|
|
"createdAt": "2026-09-07",
|
|
"completedAt": null,
|
|
"branch": "main",
|
|
"base_branch": "main",
|
|
"worktree_path": null,
|
|
"commit": null,
|
|
"pr_url": null,
|
|
"subtasks": [],
|
|
"children": [],
|
|
"parent": null,
|
|
"relatedFiles": [
|
|
"server/src/constants/permissions.js",
|
|
"server/src/routes/apOperations.js",
|
|
"server/src/services/workspaceSettings.js",
|
|
"client/src/auth/permissions.ts",
|
|
"client/src/router/index.tsx",
|
|
"client/src/components/navigation/NavLinks.tsx",
|
|
"client/tests/e2e/payment-reviewer-permissions.spec.ts",
|
|
"server/tests/unit/routes/apOperations.permissions.test.js",
|
|
"server/tests/unit/constants/permissions.test.js",
|
|
"server/tests/unit/workspaceSettings.navigation.test.js",
|
|
"server/tests/unit/routes/exports.apOperations.test.js",
|
|
".trellis/spec/hyb-oa/security-privacy.md"
|
|
],
|
|
"notes": "2026-09-17 W8本地对账：AP实现已随b87cc55发布。运行制品及权限策略核验有据，真实账号AP接口/页面当时NOT_RUN；六个view_all未收窄，不重新部署或扩大权限修复。 原回执从主副本接回，见implement顶部；本轮无新的远端/提交发布，原验收未补勾。\n",
|
|
"meta": {}
|
|
}
|