fix: align permission navigation and page access

apps/admin/src/pages/Expenses/index.tsx

@@ -114,16 +114,15 @@ const ExpensesPage: React.FC = () => {
   const fetchData = useCallback(async () => {
     setLoading(true);
     try {
-      const [re, pe, rm, st]: any[] = await Promise.all([
+      const [re, pe, lookups]: any[] = await Promise.all([
         api.get('/expenses/room'),
         api.get('/expenses/personal'),
-        api.get('/rooms'),
-        api.get('/students'),
+        api.get('/expenses/lookups').catch(() => ({ rooms: [], students: [] })),
       ]);
       setRoomExpenses(re);
       setPersonalExpenses(pe);
-      setRooms(rm);
-      setStudents(st);
+      setRooms(lookups.rooms || []);
+      setStudents(lookups.students || []);
     } catch (e: any) {
       message.error(e?.message || '加载失败，请稍后重试');
     }