「权限 × 状态 × 审计」联合约束机制

frontend/src/utils/permission.ts

@@ -20,6 +20,9 @@ const PERMISSIONS: Record<string, string[]> = {
   "imp.transaction": ["ADMIN", "PM", "IMP"],
   "faq.edit": ["ADMIN", "PM"],
   "dataquery.edit": ["ADMIN", "PM", "CRA"],
+  "project.members.manage": ["ADMIN", "PM"],
+  "site.manage": ["ADMIN"],
+  "site.cra.bind": ["ADMIN"],
 };
 
 const REASONS: Record<string, string> = {
@@ -35,6 +38,9 @@ const REASONS: Record<string, string> = {
   "imp.transaction": "仅 IMP/PM/ADMIN 可操作台账",
   "faq.edit": "仅 PM/ADMIN 可维护 FAQ",
   "dataquery.edit": "仅 PM/CRA/ADMIN 可编辑数据问题",
+  "project.members.manage": "仅 ADMIN / PM 可调整项目成员",
+  "site.manage": "仅 ADMIN 可管理中心",
+  "site.cra.bind": "仅 ADMIN 可绑定 CRA",
 };
 
 export const usePermission = () => {