fix(auth): 完善权限控制与强制改密流程

clinical-web/src/views/management/documents/components/DocumentLibraryHeader.vue

@@ -5,8 +5,10 @@ withDefaults(
     total: number
     /** 只在演示模式下展示「重置演示数据」：真实环境不该出现这个自测入口 */
     showReset?: boolean
+    canCreate?: boolean
+    canExport?: boolean
   }>(),
-  { showReset: false },
+  { showReset: false, canCreate: false, canExport: false },
 )
 
 const emit = defineEmits<{
@@ -40,11 +42,11 @@ function handleInput(event: Event) {
         aria-label="搜索模板名称、编号或科室"
         @input="handleInput"
       />
-      <button type="button" class="tool-button primary" @click="emit('add')">
+      <button v-if="canCreate" type="button" class="tool-button primary" @click="emit('add')">
         <span aria-hidden="true">＋</span>
         新增文档
       </button>
-      <button type="button" class="tool-button secondary" @click="emit('export')">
+      <button v-if="canExport" type="button" class="tool-button secondary" @click="emit('export')">
         导出模板包
       </button>
       <button