按业务模块拆分附件权限

frontend/src/utils/attachmentPermissions.test.ts

@@ -0,0 +1,20 @@
+import { describe, expect, it } from "vitest";
+import { getAttachmentPermissionKey } from "./attachmentPermissions";
+
+describe("attachment permission mapping", () => {
+  it("maps attachment entity types to module attachment permissions", () => {
+    expect(getAttachmentPermissionKey("contract_fee_contract", "delete")).toBe("fees_contracts_attachments:delete");
+    expect(getAttachmentPermissionKey("startup_feasibility", "read")).toBe("startup_initiation_attachments:read");
+    expect(getAttachmentPermissionKey("startup_ethics", "create")).toBe("startup_ethics_attachments:create");
+    expect(getAttachmentPermissionKey("startup_kickoff_ppt", "read")).toBe("startup_auth_attachments:read");
+    expect(getAttachmentPermissionKey("training_authorization", "delete")).toBe("startup_auth_attachments:delete");
+    expect(getAttachmentPermissionKey("drug_shipment", "read")).toBe("drug_shipments_attachments:read");
+    expect(getAttachmentPermissionKey("precaution", "create")).toBe("precautions_attachments:create");
+    expect(getAttachmentPermissionKey("faq_replies", "create")).toBe("faq_attachments:create");
+  });
+
+  it("does not return generic attachments permissions", () => {
+    expect(getAttachmentPermissionKey("unknown", "read")).toBeNull();
+    expect(getAttachmentPermissionKey("precaution", "read")).not.toBe("attachments:read");
+  });
+});

frontend/src/utils/attachmentPermissions.ts

@@ -0,0 +1,25 @@
+export type AttachmentPermissionAction = "create" | "read" | "delete";
+
+const ATTACHMENT_PERMISSION_PREFIXES: Record<string, string> = {
+  contract_fee_contract: "fees_contracts_attachments",
+  contract_fee_voucher: "fees_contracts_attachments",
+  contract_fee_invoice: "fees_contracts_attachments",
+  startup_feasibility: "startup_initiation_attachments",
+  startup_ethics: "startup_ethics_attachments",
+  startup_kickoff: "startup_auth_attachments",
+  startup_kickoff_minutes: "startup_auth_attachments",
+  startup_kickoff_signin: "startup_auth_attachments",
+  startup_kickoff_ppt: "startup_auth_attachments",
+  training_authorization: "startup_auth_attachments",
+  drug_shipment: "drug_shipments_attachments",
+  precaution: "precautions_attachments",
+  faq_replies: "faq_attachments",
+};
+
+export const getAttachmentPermissionKey = (
+  entityType: string,
+  action: AttachmentPermissionAction
+): string | null => {
+  const prefix = ATTACHMENT_PERMISSION_PREFIXES[entityType];
+  return prefix ? `${prefix}:${action}` : null;
+};