feat(M02-C): 建立RBAC与门店数据范围

backend/src/server.ts

@@ -3,6 +3,7 @@ import { loadConfig } from './config.js';
 import { closeMySqlPool, createMySqlPool } from './db/mysql.js';
 import { PlatformConfigRepository } from './tenancy/platform-config-repository.js';
 import { AuthRepository } from './auth/auth-repository.js';
+import { RbacRepository } from './auth/rbac-repository.js';
 import { parseWechatAppSecrets, WechatHttpClient } from './auth/wechat-client.js';
 
 const config = loadConfig();
@@ -15,7 +16,8 @@ const app = await buildApp({
     wechat: new WechatHttpClient(parseWechatAppSecrets(config.auth.wechatAppSecretsJson)),
     jwtSecret: config.auth.jwtSecret,
     accessTokenTtlSeconds: config.auth.accessTokenTtlSeconds,
-    sessionTtlSeconds: config.auth.sessionTtlSeconds
+    sessionTtlSeconds: config.auth.sessionTtlSeconds,
+    accessControl: new RbacRepository(pool)
   }
 });
 app.addHook('onClose', async () => {