feat: 更新前端UI，增强审计和日志视图功能

web/src/utils/accessControl.js

@@ -14,7 +14,7 @@ const ALWAYS_VISIBLE_VIEWS = new Set(['workbench', 'requests', 'policies'])
 const VIEW_ROLE_RULES = {
   overview: ['finance', 'executive'],
   approval: ['approver'],
-  audit: ['auditor'],
+  audit: ['auditor', 'finance'],
   logs: ['manager'],
   employees: ['manager'],
   settings: ['manager']
@@ -28,9 +28,13 @@ function normalizedRoleCodes(user) {
   return Array.isArray(user.roleCodes) ? user.roleCodes.filter(Boolean) : []
 }
 
-export function isManagerUser(user) {
-  return Boolean(user?.isAdmin) || normalizedRoleCodes(user).includes('manager')
-}
+export function isManagerUser(user) {
+  return Boolean(user?.isAdmin) || normalizedRoleCodes(user).includes('manager')
+}
+
+export function isFinanceUser(user) {
+  return normalizedRoleCodes(user).includes('finance')
+}
 
 export function canAccessAppView(user, viewId) {
   if (!viewId || !user) {