feat(M02-D): 完成用户与员工权限管理

backend/src/auth/auth-repository.ts

@@ -138,8 +138,14 @@ export class AuthRepository {
       await connection.execute(
         `INSERT IGNORE INTO qipai_role_permissions (tenant_id, role_id, permission_id)
          SELECT ?, r.id, p.id FROM qipai_roles r
-         INNER JOIN qipai_permissions p ON p.code IN ('profile.read', 'order.self.read')
-         WHERE r.tenant_id = ? AND r.code = 'CUSTOMER'`,
+         INNER JOIN qipai_permissions p ON
+           (r.code = 'CUSTOMER' AND p.code IN ('profile.read', 'order.self.read'))
+           OR (r.code = 'STORE_ADMIN'
+               AND p.code IN ('user.read', 'staff.manage', 'session.reset',
+                              'store.operation.read', 'store.operation.write'))
+           OR (r.code IN ('TENANT_ADMIN', 'PLATFORM_ADMIN')
+               AND p.code IN ('user.read', 'staff.manage', 'session.reset', 'tenant.manage'))
+         WHERE r.tenant_id = ?`,
         [input.context.tenantId, input.context.tenantId]
       );
       await connection.execute(