fix: enforce permission-aware navigation

src/composables/useDynamicButton.ts

@@ -12,6 +12,7 @@ import {
   type ComputedRef,
   type Ref,
 } from 'vue'
+import type { UserPermissionKey } from '@/utils/permission'
 
 // 声明全局变量类型
 declare global {
@@ -29,6 +30,7 @@ export interface DynamicButtonMenuItem {
   titleParams?: Record<string, unknown>
   icon?: string
   color?: string
+  permission?: UserPermissionKey
   action: () => void
 }
 
@@ -57,11 +59,12 @@ export function useDynamicButton(options: {
   icon: MaybeRefValue<string>
   onClick?: () => void
   menuItems?: MaybeRefValue<DynamicButtonMenuItem[] | undefined>
+  permission?: UserPermissionKey
   show?: MaybeRefValue<boolean>
   autoRegister?: boolean // 是否自动注册，默认为true
 }) {
   // 提取配置
-  const { icon, onClick, menuItems, show, autoRegister = true } = options
+  const { icon, onClick, menuItems, permission, show, autoRegister = true } = options
 
   // 动态按钮相关
   const registerDynamicButton = inject<((button: any) => void) | null>('registerDynamicButton', null)
@@ -81,6 +84,7 @@ export function useDynamicButton(options: {
     return {
       icon: resolvedIcon.value,
       action: onClick || (() => {}),
+      permission,
       show: resolvedShow.value,
       menuItems: buttonMenuItems && buttonMenuItems.length > 0 ? buttonMenuItems : undefined,
     }
@@ -174,7 +178,7 @@ export function useDynamicButton(options: {
       cleanupDynamicButton()
     })
 
-    watch([resolvedIcon, resolvedShow, resolvedMenuItems], () => {
+    watch([resolvedIcon, resolvedShow, resolvedMenuItems, () => permission], () => {
       if (!componentActive.value) return
 
       setupDynamicButton()

src/composables/useDynamicHeaderTab.ts

@@ -1,5 +1,6 @@
 import type { ComputedRef, Ref } from 'vue'
 import { useTabStateRestore } from '@/composables/useStateRestore'
+import type { UserPermissionKey } from '@/utils/permission'
 
 // 动态标签页相关类型
 interface DynamicHeaderTabButton {
@@ -9,6 +10,7 @@ interface DynamicHeaderTabButton {
   size?: string
   class?: string
   action?: () => void
+  permission?: UserPermissionKey
   show?: boolean | ComputedRef<boolean>
   loading?: boolean | ComputedRef<boolean>
   dataAttr?: string // 用于VMenu定位的data属性

src/composables/useSetupWizard.ts

@@ -1619,7 +1619,7 @@ export function useSetupWizard() {
   // 加载存储设置
   async function loadStorageSettings() {
     try {
-      const result: { [key: string]: any } = await api.get('system/setting/Directories')
+      const result: { [key: string]: any } = await api.get('system/setting/public/Directories')
       if (result.success && result.data?.value && result.data.value.length > 0) {
         const directory = result.data.value[0]
         wizardData.value.storage.downloadPath = directory.download_path || ''