chore: 同步本地 v9 整改与运营能力

server-go/internal/model/permission_seed.go

@@ -47,6 +47,14 @@ var AllPermissions = []PermissionDef{
 	{"biosecurity:write", "生物安全管理", "维护种源、消毒记录并签发二维码"},
 	{"user:manage", "用户管理", "管理用户、角色和权限"},
 	{"audit:read", "审计查看", "查看审计日志"},
+	{"organization:manage", "组织管理", "维护组织及成员数据范围"},
+	{"device:write", "设备管理", "维护设备资产、校准和固件信息"},
+	{"farm:read", "产量损失查看", "查看产量、死亡、淘汰和成本记录"},
+	{"farm:write", "产量损失管理", "新增、编辑产量和损失记录"},
+	{"case:read", "案例查看", "查看已脱敏案例库"},
+	{"case:write", "案例管理", "创建、审核和发布脱敏案例"},
+	{"lab:read", "实验室结果查看", "查看实验室结构化结果"},
+	{"lab:write", "实验室结果管理", "录入实验室结果和分子分型"},
 }
 
 // RolePermissionMap 角色-权限码映射（种子数据）
@@ -66,6 +74,8 @@ var RolePermissionMap = map[string][]string{
 		"trace:read", "trace:write",
 		"biosecurity:read", "biosecurity:write",
 		"user:manage", "audit:read",
+		"organization:manage", "device:write",
+		"farm:read", "farm:write", "case:read", "case:write", "lab:read", "lab:write",
 	},
 	RoleOperator: {
 		"dashboard:view", "room:read", "room:write", "device:read", "device:control",
@@ -81,6 +91,7 @@ var RolePermissionMap = map[string][]string{
 		"consultation:read", "consultation:write",
 		"trace:read", "trace:write",
 		"biosecurity:read", "biosecurity:write",
+		"device:write", "farm:read", "farm:write", "case:read", "case:write", "lab:read", "lab:write",
 	},
 	RoleViewer: {
 		"dashboard:view", "room:read", "device:read",
@@ -95,6 +106,7 @@ var RolePermissionMap = map[string][]string{
 		"consultation:read",
 		"trace:read",
 		"biosecurity:read",
+		"farm:read", "case:read", "lab:read",
 	},
 	RoleFarmer: {
 		"dashboard:view", "room:read", "device:read", "device:control",
@@ -109,5 +121,6 @@ var RolePermissionMap = map[string][]string{
 		"consultation:read",
 		"trace:read",
 		"biosecurity:read", "biosecurity:write",
+		"farm:read", "farm:write", "case:read", "lab:read",
 	},
 }