feat: add auth module with login and access control

web/src/views/AppShellRouteView.vue

@@ -1,7 +1,7 @@
 <template>
   <div class="app">
     <SidebarRail
-      :nav-items="navItems"
+      :nav-items="filteredNavItems"
       :active-view="activeView"
       :current-user="currentUser"
       @navigate="handleNavigate"
@@ -124,7 +124,7 @@
 </template>
 
 <script setup>
-import { ref } from 'vue'
+import { computed, ref } from 'vue'
 
 import SidebarRail from '../components/layout/SidebarRail.vue'
 import TopBar from '../components/layout/TopBar.vue'
@@ -142,6 +142,7 @@ import EmployeeManagementView from './EmployeeManagementView.vue'
 
 import { useAppShell } from '../composables/useAppShell.js'
 import { useSystemState } from '../composables/useSystemState.js'
+import { filterNavItemsByAccess } from '../utils/accessControl.js'
 
 const employeeSummary = ref(null)
 
@@ -183,6 +184,7 @@ const {
 } = useAppShell()
 
 const { currentUser, logout } = useSystemState()
+const filteredNavItems = computed(() => filterNavItemsByAccess(navItems, currentUser.value))
 
 function handleLogout() {
   logout('manual')

web/src/views/LoginView.vue

@@ -71,14 +71,14 @@
 
       <header class="card-head">
         <h2>欢迎登录</h2>
-        <p>使用初始化时创建的管理员账号进入系统</p>
+        <p>使用员工邮箱或管理员账号进入系统</p>
       </header>
 
       <form class="login-form" @submit.prevent="emit('login', { username, password })">
         <label class="field">
           <span class="sr-only">账号</span>
           <i class="mdi mdi-account-outline"></i>
-          <input v-model="username" type="text" placeholder="请输入管理员账号" autocomplete="username" required />
+          <input v-model="username" type="text" placeholder="请输入员工邮箱 / 管理员账号" autocomplete="username" required />
         </label>
 
         <label class="field">
@@ -87,7 +87,7 @@
           <input
             v-model="password"
             :type="showPassword ? 'text' : 'password'"
-            placeholder="请输入管理员密码"
+            placeholder="请输入登录密码"
             autocomplete="current-password"
             required
           />