权限修改

.next/server/app-paths-manifest.json

@@ -2,14 +2,19 @@
   "/api/contracts/route": "app/api/contracts/route.js",
   "/login/page": "app/login/page.js",
   "/api/config/route": "app/api/config/route.js",
-  "/api/contracts/[id]/route": "app/api/contracts/[id]/route.js",
   "/api/auth/login/route": "app/api/auth/login/route.js",
   "/api/auth/me/route": "app/api/auth/me/route.js",
   "/api/partners/route": "app/api/partners/route.js",
   "/api/users/route": "app/api/users/route.js",
+  "/api/departments/route": "app/api/departments/route.js",
+  "/api/permissions/route": "app/api/permissions/route.js",
   "/dashboard/page": "app/dashboard/page.js",
-  "/dashboard/contracts/page": "app/dashboard/contracts/page.js",
   "/dashboard/contracts/[id]/page": "app/dashboard/contracts/[id]/page.js",
+  "/dashboard/contracts/create/page": "app/dashboard/contracts/create/page.js",
+  "/dashboard/contracts/page": "app/dashboard/contracts/page.js",
   "/dashboard/partners/page": "app/dashboard/partners/page.js",
-  "/dashboard/contracts/create/page": "app/dashboard/contracts/create/page.js"
+  "/dashboard/users/page": "app/dashboard/users/page.js",
+  "/dashboard/departments/page": "app/dashboard/departments/page.js",
+  "/dashboard/settings/page": "app/dashboard/settings/page.js",
+  "/dashboard/permissions/page": "app/dashboard/permissions/page.js"
 }

.next/server/webpack-runtime.js

@@ -125,7 +125,7 @@
 /******/ 	
 /******/ 	/* webpack/runtime/getFullHash */
 /******/ 	(() => {
-/******/ 		__webpack_require__.h = () => ("823cf745e83250f4")
+/******/ 		__webpack_require__.h = () => ("4e249709f5327ffd")
 /******/ 	})();
 /******/ 	
 /******/ 	/* webpack/runtime/hasOwnProperty shorthand */

.next/static/chunks/webpack.js

@@ -192,7 +192,7 @@
 /******/ 	
 /******/ 	/* webpack/runtime/getFullHash */
 /******/ 	!function() {
-/******/ 		__webpack_require__.h = function() { return "795e4ba0e1b25e0b"; }
+/******/ 		__webpack_require__.h = function() { return "254cbc5de8b78f08"; }
 /******/ 	}();
 /******/ 	
 /******/ 	/* webpack/runtime/global */

.next/static/webpack/795e4ba0e1b25e0b.webpack.hot-update.json

@@ -0,0 +1 @@
+{"c":["app/dashboard/contracts/page","webpack"],"r":[],"m":[]}

.next/static/webpack/webpack.795e4ba0e1b25e0b.hot-update.js

@@ -0,0 +1,18 @@
+"use strict";
+/*
+ * ATTENTION: An "eval-source-map" devtool has been used.
+ * This devtool is neither made for production nor for readable output files.
+ * It uses "eval()" calls to create a separate source file with attached SourceMaps in the browser devtools.
+ * If you are trying to read the output file, select a different devtool (https://webpack.js.org/configuration/devtool/)
+ * or disable the default devtool with "devtool: false".
+ * If you are looking for production-ready output files, see mode: "production" (https://webpack.js.org/configuration/mode/).
+ */
+self["webpackHotUpdate_N_E"]("webpack",{},
+/******/ function(__webpack_require__) { // webpackRuntimeModules
+/******/ /* webpack/runtime/getFullHash */
+/******/ !function() {
+/******/ 	__webpack_require__.h = function() { return "254cbc5de8b78f08"; }
+/******/ }();
+/******/ 
+/******/ }
+);

src/app/api/contracts/route.js

@@ -30,9 +30,9 @@ export async function GET(request) {
         queryParams.push(user.id);
         break;
       case 'supervisor':
-        // 主管只能看到本部门的合同
+        // 主管只能看到自己是项目负责人的合同
-        whereClauses.push('c.department_id = ?');
+        whereClauses.push('c.project_leader = ?');
-        queryParams.push(user.department_id);
+        queryParams.push(user.real_name);
         break;
       case 'finance':
       case 'secretary':

src/app/dashboard/contracts/page.js

@@ -169,7 +169,7 @@ export default function ContractsPage() {
       <div className="page-header">
         <div>
           <h1 className="page-title">合同流转</h1>
-          <p className="page-subtitle">管理和查看所有合同信息</p>
+
         </div>
         <div style={{ display: 'flex', gap: '12px' }}>
           {user?.role === 'employee' && (