{
  "_comment": "pipeline-app RBAC 权限定义（r:p 数据）。角色 -> 路径模式。路径模式：精确匹配 /pipeline-sdlc/index.ui；前缀匹配 /product_management/** 或 /pricing/%（匹配该前缀下所有路径）。由 scripts/import_rp.py 导入 permission + rolepermission 表。",
  "roles": {
    "any": [
      "/rbac/user/login.ui",
      "/rbac/user/up_login.dspy",
      "/rbac/user/userpassword_login.dspy",
      "/rbac/user/userpassword_login.ui",
      "/rbac/phone_login.dspy",
      "/rbac/gen_sms_code.dspy",
      "/rbac/qr_scan.ui",
      "/rbac/user/logout.dspy",
      "/rbac/usermenu.ui",
      "/i18n_getmsgs",
      "/appbase/menu.ui",
      "/product_management/menu.ui",
      "/discount/menu.ui",
      "/pricing/menu.ui",
      "/unipay/usermenu.ui",
      "/univer-office",
      "/univer-office/**",
      "/accounting/api/fetch_forex_rates.dspy",
      "/accounting/api/dayend.dspy"
    ],
    "logined": [
      "/idfile",
      "/idfile/**",
      "/download",
      "/download/**",
      "/pipeline-sdlc",
      "/pipeline-sdlc/**",
      "/product_management",
      "/product_management/**",
      "/discount",
      "/discount/**",
      "/pricing",
      "/pricing/**",
      "/unipay",
      "/unipay/**",
      "/appbase",
      "/appbase/**",
      "/showcase",
      "/showcase/**",
      "/tenant",
      "/tenant/**",
      "/pipeline_core",
      "/pipeline_core/**",
      "/mine.ui",
      "/pipeline_ops",
      "/pipeline_ops/**",
      "/pipeline_task",
      "/pipeline_task/**",
      "/app_audit",
      "/app_audit/**",
      "/office",
      "/office/**",
      "/accounting",
      "/accounting/**",
      "/pipeline-llm",
      "/pipeline-llm/**",
      "/rag",
      "/rag/",
      "/rag/**"
    ],
    "owner.superuser": [
      "/rbac",
      "/rbac/**",
      "/dapi",
      "/dapi/**"
    ]
  }
}