fix(fleet): preserve drafts before dialog close and respect dashboard permissions

src/modules/dashboard/pages/DashboardView.test.ts

@@ -1,7 +1,10 @@
 import { enableAutoUnmount, flushPromises, mount } from '@vue/test-utils'
 import { afterEach, beforeEach, describe, expect, it, vi } from 'vitest'
 import DashboardView from './DashboardView.vue'
-import { getTodayNewOrderCount } from '../api/dashboard'
+import { getTodayNewOrderCount, getActiveCustomerCount, getDashboardOperationalMetrics } from '../api/dashboard'
+
+const access = vi.hoisted(() => ({ permissions: new Set<string>() }))
+vi.mock('@/core/access/accessPreview', () => ({ useAccessPreviewStore: () => ({ can: (permission: string) => access.permissions.has(permission) }) }))
 
 vi.mock('../api/dashboard', () => ({
   getTodayNewOrderCount: vi.fn().mockResolvedValue(12),
@@ -18,7 +21,28 @@ vi.mock('../api/dashboard', () => ({
 enableAutoUnmount(afterEach)
 
 describe('DashboardView', () => {
-  beforeEach(() => vi.clearAllMocks())
+  beforeEach(() => {
+    vi.clearAllMocks()
+    access.permissions = new Set(['platform:order:list', 'platform:customer:list', 'platform:firstleg:container:list', 'platform:firstleg:customs:list'])
+  })
+
+  it('makes no metric requests for a minimal pool sales account and gives an authorized-menu hint', async () => {
+    access.permissions = new Set(['platform:fleet:capacity-offer:list', 'platform:fleet:capacity-offer:inquiry-create', 'platform:fleet:capacity-offer:inquiry-edit', 'platform:fleet:capacity-offer:inquiry-cancel'])
+    const wrapper = mount(DashboardView); await flushPromises()
+    expect(getTodayNewOrderCount).not.toHaveBeenCalled(); expect(getActiveCustomerCount).not.toHaveBeenCalled(); expect(getDashboardOperationalMetrics).not.toHaveBeenCalled()
+    expect(wrapper.findAll('.dashboard-metric')).toHaveLength(0)
+    expect(wrapper.text()).toContain('请从左侧菜单进入已授权业务')
+    expect(wrapper.text()).not.toContain('指标加载失败'); expect(wrapper.text()).not.toContain('刷新数据')
+  })
+
+  it('requests only granted metric sources and requires both container and customs permissions', async () => {
+    access.permissions = new Set(['platform:customer:list', 'platform:firstleg:container:list'])
+    const wrapper = mount(DashboardView); await flushPromises()
+    expect(getActiveCustomerCount).toHaveBeenCalledOnce(); expect(getTodayNewOrderCount).not.toHaveBeenCalled(); expect(getDashboardOperationalMetrics).not.toHaveBeenCalled()
+    expect(wrapper.findAll('.dashboard-metric p').map(node => node.text())).toEqual(['活跃客户'])
+    await wrapper.findAll('button').find(button => button.text().trim() === '刷新数据')!.trigger('click'); await flushPromises()
+    expect(getActiveCustomerCount).toHaveBeenCalledTimes(2); expect(getDashboardOperationalMetrics).not.toHaveBeenCalled()
+  })
 
   it('renders only the four live metrics', async () => {
     const wrapper = mount(DashboardView)