fix permissions and teacher attendance workflows

apps/admin/src/layouts/MainLayout.tsx

@@ -28,6 +28,8 @@ import {
   ApiOutlined,
 } from '@ant-design/icons';
 import { usePermission } from '../hooks/usePermission';
+import api from '../api';
+import { writePermissions } from '../auth/permission-store';
 import NotificationBell from '../components/NotificationBell';
 
 const { Header, Sider, Content } = Layout;
@@ -128,6 +130,21 @@ const MainLayout: React.FC = () => {
   const user = useMemo(() => JSON.parse(localStorage.getItem('user') || '{}'), []);
   const { hasPermission } = usePermission();
 
+  useEffect(() => {
+    let cancelled = false;
+    api.get<{ id: number; username: string; permissions: string[]; roles?: string[] }>('/auth/profile')
+      .then((profile) => {
+        if (cancelled) return;
+        writePermissions(profile.permissions || []);
+        const cachedUser = JSON.parse(localStorage.getItem('user') || '{}');
+        localStorage.setItem('user', JSON.stringify({ ...cachedUser, ...profile }));
+      })
+      .catch(() => {
+        // The API interceptor handles expired/invalid sessions.
+      });
+    return () => { cancelled = true; };
+  }, []);
+
   const screens = Grid.useBreakpoint();
   const isMobile = !screens.sm;                          // < 576px (仅 xs)
   const isTablet = (screens.sm || screens.md) && !screens.lg; // 576-991px
@@ -288,7 +305,7 @@ const MainLayout: React.FC = () => {
             onClick={() => (isMobile || isTablet ? setDrawerOpen(true) : setCollapsed(!collapsed))}
           />
           <div style={{ display: 'flex', alignItems: 'center', gap: 16 }}>
-            <NotificationBell />
+            {hasPermission('notification:view') && <NotificationBell />}
             <Dropdown
               menu={{
                 items: [