diff --git a/web/delivery-platform-ui/src/views/AuditSearchView.vue b/web/delivery-platform-ui/src/views/AuditSearchView.vue
index 89d5572..366953f 100644
--- a/web/delivery-platform-ui/src/views/AuditSearchView.vue
+++ b/web/delivery-platform-ui/src/views/AuditSearchView.vue
@@ -17,7 +17,7 @@
             class="filter-item"
           />
           <el-button type="primary" :loading="loading" @click="load">查询</el-button>
-          <el-button :loading="exporting" @click="onExport">导出 CSV</el-button>
+          <el-button v-permission="'audit:export'" :loading="exporting" @click="onExport">导出 CSV</el-button>
         </div>
       </div>
     </template>
diff --git a/web/delivery-platform-ui/src/views/CallbackInboxDetailView.vue b/web/delivery-platform-ui/src/views/CallbackInboxDetailView.vue
index 06a00ad..2bdbed4 100644
--- a/web/delivery-platform-ui/src/views/CallbackInboxDetailView.vue
+++ b/web/delivery-platform-ui/src/views/CallbackInboxDetailView.vue
@@ -55,14 +55,14 @@
         <code>LICENSE_WEBHOOK_OPS_TOKEN</code>。
       </p>
       <div v-if="canReplayWebhook" class="status-row">
-        <el-button type="warning" :loading="replaying" @click="replayWebhook">重新入队出库（DEAD→待投递）</el-button>
+        <el-button v-permission="'callback:process'" type="warning" :loading="replaying" @click="replayWebhook">重新入队出库（DEAD→待投递）</el-button>
       </div>
 
       <h3 v-if="isPending" class="section-title">状态处置</h3>
       <div v-if="isPending" class="status-row">
-        <el-button type="success" :loading="patchingStatus" @click="setStatus('PROCESSED')">标为已处理</el-button>
-        <el-button type="danger" :loading="patchingStatus" @click="setStatus('FAILED')">标为失败</el-button>
-        <el-button type="info" :loading="patchingStatus" @click="setStatus('IGNORED')">忽略</el-button>
+        <el-button v-permission="'callback:process'" type="success" :loading="patchingStatus" @click="setStatus('PROCESSED')">标为已处理</el-button>
+        <el-button v-permission="'callback:process'" type="danger" :loading="patchingStatus" @click="setStatus('FAILED')">标为失败</el-button>
+        <el-button v-permission="'callback:process'" type="info" :loading="patchingStatus" @click="setStatus('IGNORED')">忽略</el-button>
       </div>
 
       <h3 class="section-title">人工挂接（可选）</h3>
@@ -77,7 +77,7 @@
           <el-input v-model="linkForm.contractId" clearable placeholder="选填" />
         </el-form-item>
         <el-form-item>
-          <el-button type="primary" :loading="savingLink" @click="saveLink">保存挂接</el-button>
+          <el-button v-permission="'callback:process'" type="primary" :loading="savingLink" @click="saveLink">保存挂接</el-button>
         </el-form-item>
       </el-form>
     </template>
diff --git a/web/delivery-platform-ui/src/views/ContractSnReportView.vue b/web/delivery-platform-ui/src/views/ContractSnReportView.vue
index a78847f..1ebbc9b 100644
--- a/web/delivery-platform-ui/src/views/ContractSnReportView.vue
+++ b/web/delivery-platform-ui/src/views/ContractSnReportView.vue
@@ -4,7 +4,7 @@
       <div class="toolbar">
         <span class="title">合同 SN 报表</span>
         <div class="actions">
-          <el-button @click="handleExport" :loading="exporting">导出 CSV</el-button>
+          <el-button v-permission="'report:export'" @click="handleExport" :loading="exporting">导出 CSV</el-button>
           <el-button type="primary" :loading="loading" @click="load">刷新</el-button>
         </div>
       </div>
diff --git a/web/delivery-platform-ui/src/views/ContractsView.vue b/web/delivery-platform-ui/src/views/ContractsView.vue
index 4ab9b71..89a2b71 100644
--- a/web/delivery-platform-ui/src/views/ContractsView.vue
+++ b/web/delivery-platform-ui/src/views/ContractsView.vue
@@ -12,7 +12,7 @@
             @keyup.enter="load"
           />
           <el-button type="primary" :loading="loading" @click="load">查询</el-button>
-          <el-button type="success" @click="goNew">新建合同</el-button>
+          <el-button v-permission="'contract:rw'" type="success" @click="goNew">新建合同</el-button>
         </div>
       </div>
     </template>
diff --git a/web/delivery-platform-ui/src/views/DeliveriesView.vue b/web/delivery-platform-ui/src/views/DeliveriesView.vue
index 34dcc3f..90f5027 100644
--- a/web/delivery-platform-ui/src/views/DeliveriesView.vue
+++ b/web/delivery-platform-ui/src/views/DeliveriesView.vue
@@ -22,7 +22,7 @@
             @keyup.enter="load"
           />
           <el-button type="primary" :loading="loading" @click="load">查询</el-button>
-          <el-button type="success" @click="goNew">新建交付批次</el-button>
+          <el-button v-permission="'delivery:rw'" type="success" @click="goNew">新建交付批次</el-button>
         </div>
       </div>
     </template>
diff --git a/web/delivery-platform-ui/src/views/DeliveryBatchDetailView.vue b/web/delivery-platform-ui/src/views/DeliveryBatchDetailView.vue
index 5d856ff..b78d8a7 100644
--- a/web/delivery-platform-ui/src/views/DeliveryBatchDetailView.vue
+++ b/web/delivery-platform-ui/src/views/DeliveryBatchDetailView.vue
@@ -10,8 +10,8 @@
           </el-tag>
         </div>
         <div v-if="batch && isPending" class="head-actions">
-          <el-button type="primary" :loading="savingHeader" @click="saveHeader">保存抬头</el-button>
-          <el-button type="success" :loading="markingDelivered" @click="onMarkDelivered">标记已交付</el-button>
+          <el-button v-permission="'delivery:rw'" type="primary" :loading="savingHeader" @click="saveHeader">保存抬头</el-button>
+          <el-button v-permission="'delivery:rw'" type="success" :loading="markingDelivered" @click="onMarkDelivered">标记已交付</el-button>
         </div>
       </div>
     </template>
@@ -44,7 +44,7 @@
 
       <h3 class="section-title">交付明细</h3>
       <div v-if="isPending" class="line-toolbar">
-        <el-button type="primary" @click="openLineDialog()">添加明细</el-button>
+        <el-button v-permission="'delivery:rw'" type="primary" @click="openLineDialog()">添加明细</el-button>
       </div>
       <el-table :data="lineRows" border stripe style="width: 100%">
         <el-table-column prop="sortOrder" label="排序" width="80" />
diff --git a/web/delivery-platform-ui/src/views/DeviceDetailView.vue b/web/delivery-platform-ui/src/views/DeviceDetailView.vue
index fcadc31..57cabc6 100644
--- a/web/delivery-platform-ui/src/views/DeviceDetailView.vue
+++ b/web/delivery-platform-ui/src/views/DeviceDetailView.vue
@@ -10,7 +10,7 @@
           </el-tag>
         </div>
         <div v-if="device" class="head-actions">
-          <el-button type="primary" @click="openSwapDialog">发起换机申请</el-button>
+          <el-button v-permission="'device:rw'" type="primary" @click="openSwapDialog">发起换机申请</el-button>
         </div>
       </div>
     </template>
@@ -56,7 +56,7 @@
       </el-form>
       <template #footer>
         <el-button @click="swapDialogVisible = false">取消</el-button>
-        <el-button type="primary" :loading="swapSaving" @click="handleSwap">提交</el-button>
+        <el-button v-permission="'device:rw'" type="primary" :loading="swapSaving" @click="handleSwap">提交</el-button>
       </template>
     </el-dialog>
   </el-card>
diff --git a/web/delivery-platform-ui/src/views/DeviceListView.vue b/web/delivery-platform-ui/src/views/DeviceListView.vue
index a145e4a..7cfd98a 100644
--- a/web/delivery-platform-ui/src/views/DeviceListView.vue
+++ b/web/delivery-platform-ui/src/views/DeviceListView.vue
@@ -12,7 +12,7 @@
             @keyup.enter="handleQuery"
           />
           <el-button type="primary" :loading="loading" @click="handleQuery">查询</el-button>
-          <el-button type="success" @click="openCreate">登记设备</el-button>
+          <el-button v-permission="'device:rw'" type="success" @click="openCreate">登记设备</el-button>
         </div>
       </div>
     </template>
@@ -67,7 +67,7 @@
       </el-form>
       <template #footer>
         <el-button @click="dialogVisible = false">取消</el-button>
-        <el-button type="primary" :loading="saving" @click="handleCreate">保存</el-button>
+        <el-button v-permission="'device:rw'" type="primary" :loading="saving" @click="handleCreate">保存</el-button>
       </template>
     </el-dialog>
   </el-card>
diff --git a/web/delivery-platform-ui/src/views/LicenseSnDetailView.vue b/web/delivery-platform-ui/src/views/LicenseSnDetailView.vue
index 7f6bba6..a3714a2 100644
--- a/web/delivery-platform-ui/src/views/LicenseSnDetailView.vue
+++ b/web/delivery-platform-ui/src/views/LicenseSnDetailView.vue
@@ -44,7 +44,7 @@
           <el-input v-model="bindForm.activationRemark" type="textarea" :rows="2" maxlength="512" show-word-limit />
         </el-form-item>
         <el-form-item>
-          <el-button type="primary" :loading="savingBind" @click="saveBind">保存绑定</el-button>
+          <el-button v-permission="'license:sn:rw'" type="primary" :loading="savingBind" @click="saveBind">保存绑定</el-button>
         </el-form-item>
       </el-form>
 
@@ -67,7 +67,7 @@
             <el-option label="到期失效" value="EXPIRED" />
           </el-select>
         </el-form-item>
-        <el-button type="primary" :loading="patchingStatus" :disabled="!statusPick" @click="applyStatus">更新状态</el-button>
+        <el-button v-permission="'license:sn:rw'" type="primary" :loading="patchingStatus" :disabled="!statusPick" @click="applyStatus">更新状态</el-button>
       </div>
     </template>
 
diff --git a/web/delivery-platform-ui/src/views/LicenseSnWizardView.vue b/web/delivery-platform-ui/src/views/LicenseSnWizardView.vue
index 2051064..0da49ce 100644
--- a/web/delivery-platform-ui/src/views/LicenseSnWizardView.vue
+++ b/web/delivery-platform-ui/src/views/LicenseSnWizardView.vue
@@ -39,8 +39,8 @@
     </el-form>
 
     <div class="footer-actions">
-      <el-button :loading="submitting" @click="submit(false)">创建并返回列表</el-button>
-      <el-button type="primary" :loading="submitting" @click="submit(true)">创建并进入详情</el-button>
+      <el-button v-permission="'license:sn:rw'" :loading="submitting" @click="submit(false)">创建并返回列表</el-button>
+      <el-button v-permission="'license:sn:rw'" type="primary" :loading="submitting" @click="submit(true)">创建并进入详情</el-button>
     </div>
   </el-card>
 </template>
diff --git a/web/delivery-platform-ui/src/views/TodoCenterView.vue b/web/delivery-platform-ui/src/views/TodoCenterView.vue
index f9a5b73..0fc98d7 100644
--- a/web/delivery-platform-ui/src/views/TodoCenterView.vue
+++ b/web/delivery-platform-ui/src/views/TodoCenterView.vue
@@ -37,8 +37,8 @@
       </el-table-column>
       <el-table-column label="操作" width="160" fixed="right">
         <template #default="{ row }">
-          <el-button type="primary" link :loading="claimingId === row.id" @click="handleClaim(row.id)">认领</el-button>
-          <el-button type="danger" link :loading="ignoringId === row.id" @click="handleIgnore(row.id)">忽略</el-button>
+          <el-button v-permission="'todo:process'" type="primary" link :loading="claimingId === row.id" @click="handleClaim(row.id)">认领</el-button>
+          <el-button v-permission="'todo:process'" type="danger" link :loading="ignoringId === row.id" @click="handleIgnore(row.id)">忽略</el-button>
         </template>
       </el-table-column>
     </el-table>