# 权限常量定义
# 基于 PRD 第7章权限设计

# 任务管理权限
PERM_TASK_CREATE = "task:create"
PERM_TASK_VIEW = "task:view"
PERM_TASK_UPDATE = "task:update"
PERM_TASK_DELETE = "task:delete"
PERM_TASK_EXPORT = "task:export"

# 用户管理权限
PERM_USER_CREATE = "user:create"
PERM_USER_VIEW = "user:view"
PERM_USER_UPDATE = "user:update"
PERM_USER_DELETE = "user:delete"

# 企业管理权限
PERM_COMPANY_VIEW = "company:view"
PERM_COMPANY_UPDATE = "company:update"

# 审计日志权限
PERM_AUDIT_VIEW = "audit:view"

# 角色默认权限映射
ROLE_PERMISSIONS = {
    "管理员": [
        PERM_TASK_CREATE, PERM_TASK_VIEW, PERM_TASK_UPDATE, PERM_TASK_DELETE, PERM_TASK_EXPORT,
        PERM_USER_CREATE, PERM_USER_VIEW, PERM_USER_UPDATE, PERM_USER_DELETE,
        PERM_COMPANY_VIEW, PERM_COMPANY_UPDATE,
        PERM_AUDIT_VIEW,
    ],
    "财务主管": [
        PERM_TASK_CREATE, PERM_TASK_VIEW, PERM_TASK_UPDATE, PERM_TASK_DELETE, PERM_TASK_EXPORT,
        PERM_USER_CREATE, PERM_USER_VIEW, PERM_USER_UPDATE,
        PERM_COMPANY_VIEW,
        PERM_AUDIT_VIEW,
    ],
    "会计": [
        PERM_TASK_CREATE, PERM_TASK_VIEW, PERM_TASK_UPDATE, PERM_TASK_EXPORT,
        PERM_USER_VIEW,
    ],
    "出纳": [
        PERM_TASK_VIEW, PERM_TASK_EXPORT,
    ],
    "人事": [
        PERM_TASK_VIEW,
    ],
}


def get_role_permissions(role: str) -> list[str]:
    """
    获取角色的默认权限列表
    
    Args:
        role: 角色名称
        
    Returns:
        权限列表
    """
    return ROLE_PERMISSIONS.get(role, [])