fix: enforce field-level permission checks for semi-finished and finished goods tables

inventory-web/src/views/stock/inbound/product.vue

@@ -145,7 +145,7 @@
     >
       <template v-for="col in allColumns" :key="col.prop">
         <el-table-column
-            v-if="visibleColumnProps.includes(col.prop)"
+            v-if="visibleColumnProps.includes(col.prop) && hasColumnPermission(col.prop)"
             :prop="col.prop"
             :label="col.label"
             :min-width="col.minWidth || '110'"
@@ -791,9 +791,13 @@ const initColumnPermissions = () => {
   visibleColumnProps.value = defaultVisibleCols
 }
 
-// 检查列权限（移除权限限制，始终返回 true）
+// 检查列权限
 const hasColumnPermission = (prop: string) => {
-  return true
+  if (userStore.role === 'SUPER_ADMIN' || userStore.username === 'IRIS') {
+    return true
+  }
+  const code = permissionMap[prop]
+  return code ? userStore.hasPermission(code) : false
 }
 
 const defaultVisibleCols = ['company_name', 'material_name', 'sku', 'serial_number', 'qty_stock', 'status', 'quality_status', 'product_photo', 'sale_price', 'order_id']