统一项目角色与接口权限配置

backend/app/core/project_permissions.py

@@ -48,6 +48,9 @@ async def role_has_api_permission(
     check_prerequisites: bool = True,
 ) -> bool:
     """检查角色是否有权访问特定接口"""
+    if endpoint_key not in API_ENDPOINT_PERMISSIONS:
+        return False
+
     if role == "ADMIN":
         return True
 
@@ -129,6 +132,8 @@ async def get_api_endpoint_permissions(
         if role not in matrix:
             matrix[role] = {}
         for endpoint_key, allowed in endpoints.items():
+            if endpoint_key not in API_ENDPOINT_PERMISSIONS:
+                continue
             matrix[role][endpoint_key] = {"allowed": allowed}
 
     return matrix

backend/app/core/rbac.py

@@ -25,7 +25,7 @@ ROLE_ACTIONS: dict[str, set[str]] = {
     "PM": {"view", "create_document", "create_version", "submit", "approve", "distribute", "ack", "delete_document"},
     "CRA": {"view", "create_version", "submit", "ack"},
     "PV": {"view", "create_version", "submit", "ack"},
-    "IMP": {"view", "create_version", "submit", "ack"},
+    "CTA": {"view", "create_version", "submit", "ack"},
 }