iven 0d7d3af0a8 fix(auth): standardize permission codes to dot notation and add missing permissions ...

- Change all permission codes from colon (`:`) to dot (`.`) separator
  to match handler require_permission() calls consistently
- Add missing user.list, role.list, permission.list, organization.list,
  department.list, position.list permissions (handlers check for .list
  but seeds only had :read)
- Add missing message module permissions (message.list, message.send,
  message.template.list, message.template.create)
- Add missing setting.delete, numbering.delete permissions
- Fix workflow handlers: workflow: → workflow.
- Fix message handlers: message: → message.
- Update viewer role READ_PERM_INDICES for new permission list

This fixes a critical runtime bug where ALL permission checks in
erp-auth and erp-config handlers would return 403 Forbidden because
the seed data used colon separators but handlers checked for dots.

2026-04-11 14:30:47 +08:00

..

src

fix(auth): standardize permission codes to dot notation and add missing permissions

2026-04-11 14:30:47 +08:00

Cargo.toml

feat(workflow): add workflow engine module (Phase 4)

2026-04-11 09:54:02 +08:00