fix: align permission-gated UI actions

apps/admin/src/pages/Rooms/index.tsx

@@ -31,6 +31,7 @@ import { downloadBlob } from '../../utils/download';
 import PermissionButton from '../../components/PermissionButton';
 import EditableCell from '../../components/EditableCell';
 import { message } from '../../ui/app-message';
+import { usePermission } from '../../hooks/usePermission';
 
 const statusMap: Record<string, { text: string; color: string }> = {
   available: { text: '可入住', color: 'green' },
@@ -84,6 +85,8 @@ function parseRoomNumber(input: string) {
 }
 
 const RoomsPage: React.FC = () => {
+  const { hasPermission } = usePermission();
+  const canEditRooms = hasPermission('room:edit');
   const [data, setData] = useState<any[]>([]);
   const [loading, setLoading] = useState(false);
   const [modalOpen, setModalOpen] = useState(false);
@@ -664,33 +667,35 @@ const RoomsPage: React.FC = () => {
           >
             添加宿舍
           </PermissionButton>
-          <Upload
-            accept=".xlsx,.xls"
-            showUploadList={false}
-            customRequest={async (options: UploadRequestOption<{ message?: string }>) => {
-              const { file, onSuccess, onError } = options;
-              if (typeof file === 'string') {
-                message.error('不支持字符串文件');
-                return;
-              }
-              try {
-                const formData = new FormData();
-                formData.append('file', file);
-                const res = await api.post<{ message?: string }>('/rooms/import', formData, {
-                  headers: { 'Content-Type': 'multipart/form-data' },
-                });
-                message.success(res.message || '导入成功');
-                onSuccess?.(res);
-                fetchData();
-              } catch (e: unknown) {
-                const err = e as { message?: string };
-                message.error(err?.message || '导入失败');
-                onError?.(e as UploadRequestError);
-              }
-            }}
-          >
-            <Button icon={<UploadOutlined />}>导入Excel</Button>
-          </Upload>
+          {hasPermission('room:create') ? (
+            <Upload
+              accept=".xlsx,.xls"
+              showUploadList={false}
+              customRequest={async (options: UploadRequestOption<{ message?: string }>) => {
+                const { file, onSuccess, onError } = options;
+                if (typeof file === 'string') {
+                  message.error('不支持字符串文件');
+                  return;
+                }
+                try {
+                  const formData = new FormData();
+                  formData.append('file', file);
+                  const res = await api.post<{ message?: string }>('/rooms/import', formData, {
+                    headers: { 'Content-Type': 'multipart/form-data' },
+                  });
+                  message.success(res.message || '导入成功');
+                  onSuccess?.(res);
+                  fetchData();
+                } catch (e: unknown) {
+                  const err = e as { message?: string };
+                  message.error(err?.message || '导入失败');
+                  onError?.(e as UploadRequestError);
+                }
+              }}
+            >
+              <Button icon={<UploadOutlined />}>导入Excel</Button>
+            </Upload>
+          ) : null}
           <PermissionButton
             permission="room:view"
             icon={<DownloadOutlined />}
@@ -854,56 +859,58 @@ const RoomsPage: React.FC = () => {
               label: `床位管理 (${beds.length})`,
               children: (
                 <div>
-                  <div style={{ marginBottom: 12, display: 'flex', gap: 8 }}>
-                    <Button
-                      type="primary"
-                      size="small"
-                      icon={<PlusOutlined />}
-                      disabled={drawerRoom?.status === 'archived' || remainingBedSlots === 0}
-                      onClick={() => {
-                        setBedEditing(null);
-                        bedForm.resetFields();
-                        setBedModalOpen(true);
-                      }}
-                    >
-                      添加床位
-                    </Button>
-                    <Popconfirm
-                      title={remainingBedSlots > 0 ? '批量生成床位' : '床位已达到额定人数'}
-                      description={
-                        remainingBedSlots > 0 ? (
-                          <InputNumber
-                            min={1}
-                            max={remainingBedSlots}
-                            defaultValue={defaultBatchBedCount}
-                            id="batch-bed-count"
-                            style={{ width: 80 }}
-                          />
-                        ) : (
-                          '如需增加床位，请先调整宿舍额定人数'
-                        )
-                      }
-                      onConfirm={() => {
-                        const input = document.getElementById(
-                          'batch-bed-count',
-                        ) as HTMLInputElement;
-                        handleBatchBeds(
-                          input
-                            ? parseInt(input.value) || defaultBatchBedCount
-                            : defaultBatchBedCount,
-                        );
-                      }}
-                      okText="生成"
-                      disabled={drawerRoom?.status === 'archived' || remainingBedSlots === 0}
-                    >
+                  {canEditRooms ? (
+                    <div style={{ marginBottom: 12, display: 'flex', gap: 8 }}>
                       <Button
+                        type="primary"
                         size="small"
+                        icon={<PlusOutlined />}
+                        disabled={drawerRoom?.status === 'archived' || remainingBedSlots === 0}
+                        onClick={() => {
+                          setBedEditing(null);
+                          bedForm.resetFields();
+                          setBedModalOpen(true);
+                        }}
+                      >
+                        添加床位
+                      </Button>
+                      <Popconfirm
+                        title={remainingBedSlots > 0 ? '批量生成床位' : '床位已达到额定人数'}
+                        description={
+                          remainingBedSlots > 0 ? (
+                            <InputNumber
+                              min={1}
+                              max={remainingBedSlots}
+                              defaultValue={defaultBatchBedCount}
+                              id="batch-bed-count"
+                              style={{ width: 80 }}
+                            />
+                          ) : (
+                            '如需增加床位，请先调整宿舍额定人数'
+                          )
+                        }
+                        onConfirm={() => {
+                          const input = document.getElementById(
+                            'batch-bed-count',
+                          ) as HTMLInputElement;
+                          handleBatchBeds(
+                            input
+                              ? parseInt(input.value) || defaultBatchBedCount
+                              : defaultBatchBedCount,
+                          );
+                        }}
+                        okText="生成"
                         disabled={drawerRoom?.status === 'archived' || remainingBedSlots === 0}
                       >
-                        批量生成
-                      </Button>
-                    </Popconfirm>
-                  </div>
+                        <Button
+                          size="small"
+                          disabled={drawerRoom?.status === 'archived' || remainingBedSlots === 0}
+                        >
+                          批量生成
+                        </Button>
+                      </Popconfirm>
+                    </div>
+                  ) : null}
                   <Table
                     dataSource={beds}
                     rowKey="id"
@@ -1016,45 +1023,47 @@ const RoomsPage: React.FC = () => {
               label: `柜子管理 (${lockers.length})`,
               children: (
                 <div>
-                  <div style={{ marginBottom: 12, display: 'flex', gap: 8 }}>
-                    <Button
-                      type="primary"
-                      size="small"
-                      icon={<PlusOutlined />}
-                      disabled={drawerRoom?.status === 'archived'}
-                      onClick={() => {
-                        setLockerEditing(null);
-                        lockerForm.resetFields();
-                        setLockerModalOpen(true);
-                      }}
-                    >
-                      添加柜子
-                    </Button>
-                    <Popconfirm
-                      title="批量生成柜子"
-                      description={
-                        <InputNumber
-                          min={1}
-                          max={20}
-                          defaultValue={4}
-                          id="batch-locker-count"
-                          style={{ width: 80 }}
-                        />
-                      }
-                      onConfirm={() => {
-                        const input = document.getElementById(
-                          'batch-locker-count',
-                        ) as HTMLInputElement;
-                        handleBatchLockers(input ? parseInt(input.value) || 4 : 4);
-                      }}
-                      okText="生成"
-                      disabled={drawerRoom?.status === 'archived'}
-                    >
-                      <Button size="small" disabled={drawerRoom?.status === 'archived'}>
-                        批量生成
+                  {canEditRooms ? (
+                    <div style={{ marginBottom: 12, display: 'flex', gap: 8 }}>
+                      <Button
+                        type="primary"
+                        size="small"
+                        icon={<PlusOutlined />}
+                        disabled={drawerRoom?.status === 'archived'}
+                        onClick={() => {
+                          setLockerEditing(null);
+                          lockerForm.resetFields();
+                          setLockerModalOpen(true);
+                        }}
+                      >
+                        添加柜子
                       </Button>
-                    </Popconfirm>
-                  </div>
+                      <Popconfirm
+                        title="批量生成柜子"
+                        description={
+                          <InputNumber
+                            min={1}
+                            max={20}
+                            defaultValue={4}
+                            id="batch-locker-count"
+                            style={{ width: 80 }}
+                          />
+                        }
+                        onConfirm={() => {
+                          const input = document.getElementById(
+                            'batch-locker-count',
+                          ) as HTMLInputElement;
+                          handleBatchLockers(input ? parseInt(input.value) || 4 : 4);
+                        }}
+                        okText="生成"
+                        disabled={drawerRoom?.status === 'archived'}
+                      >
+                        <Button size="small" disabled={drawerRoom?.status === 'archived'}>
+                          批量生成
+                        </Button>
+                      </Popconfirm>
+                    </div>
+                  ) : null}
                   <Table
                     dataSource={lockers}
                     rowKey="id"
@@ -1168,8 +1177,8 @@ const RoomsPage: React.FC = () => {
 
       <Modal
         title={bedEditing ? '编辑床位' : '添加床位'}
-        open={bedModalOpen}
-        onOk={handleSaveBed}
+        open={bedModalOpen && canEditRooms}
+        onOk={canEditRooms ? handleSaveBed : undefined}
         onCancel={() => {
           setBedModalOpen(false);
           setBedEditing(null);
@@ -1198,8 +1207,8 @@ const RoomsPage: React.FC = () => {
 
       <Modal
         title={lockerEditing ? '编辑柜子' : '添加柜子'}
-        open={lockerModalOpen}
-        onOk={handleSaveLocker}
+        open={lockerModalOpen && canEditRooms}
+        onOk={canEditRooms ? handleSaveLocker : undefined}
         onCancel={() => {
           setLockerModalOpen(false);
           setLockerEditing(null);