feat: 결재·마스터 실연동 업데이트

lib/features/masters/group_permission/application/permission_synchronizer.dart

@@ -0,0 +1,51 @@
+import 'package:superport_v2/core/permissions/permission_manager.dart';
+
+import '../domain/entities/group_permission.dart';
+import '../domain/mappers/group_permission_mapper.dart';
+import '../domain/repositories/group_permission_repository.dart';
+
+/// 서버에서 그룹 메뉴 권한을 조회해 [PermissionManager]에 반영하는 동기화기.
+class PermissionSynchronizer {
+  PermissionSynchronizer({
+    required GroupPermissionRepository repository,
+    required PermissionManager manager,
+    this.pageSize = 200,
+  }) : _repository = repository,
+       _manager = manager;
+
+  final GroupPermissionRepository _repository;
+  final PermissionManager _manager;
+  final int pageSize;
+
+  /// 지정한 [groupId]의 메뉴 권한을 조회해 [PermissionManager]에 적용한다.
+  Future<void> syncForGroup(int groupId) async {
+    final collected = <GroupPermission>[];
+    var page = 1;
+
+    while (true) {
+      final response = await _repository.list(
+        page: page,
+        pageSize: pageSize,
+        groupId: groupId,
+        includeDeleted: false,
+        isActive: true,
+      );
+      collected.addAll(response.items);
+
+      final currentPageSize = response.pageSize == 0
+          ? response.items.length
+          : response.pageSize;
+      if (currentPageSize == 0) {
+        break;
+      }
+      final fetched = page * currentPageSize;
+      if (fetched >= response.total) {
+        break;
+      }
+      page += 1;
+    }
+
+    final permissionMap = buildPermissionMap(collected);
+    _manager.applyServerPermissions(permissionMap);
+  }
+}

lib/features/masters/group_permission/data/dtos/group_permission_dto.dart

@@ -111,22 +111,39 @@ class GroupPermissionGroupDto {
 
 /// 권한 대상 메뉴 정보를 담는 DTO.
 class GroupPermissionMenuDto {
-  GroupPermissionMenuDto({required this.id, required this.menuName});
+  GroupPermissionMenuDto({
+    required this.id,
+    required this.menuCode,
+    required this.menuName,
+    this.path,
+  });
 
   final int id;
+  final String menuCode;
   final String menuName;
+  final String? path;
 
   /// JSON에서 메뉴 정보를 파싱한다.
   factory GroupPermissionMenuDto.fromJson(Map<String, dynamic> json) {
+    final fallbackName =
+        json['menu_name'] as String? ?? json['name'] as String? ?? '-';
+    final code =
+        json['menu_code'] as String? ?? json['code'] as String? ?? fallbackName;
     return GroupPermissionMenuDto(
       id: json['id'] as int? ?? json['menu_id'] as int,
-      menuName: json['menu_name'] as String? ?? json['name'] as String? ?? '-',
+      menuCode: code,
+      menuName: fallbackName,
+      path: json['path'] as String?,
     );
   }
 
   /// DTO를 [GroupPermissionMenu] 엔티티로 변환한다.
-  GroupPermissionMenu toEntity() =>
-      GroupPermissionMenu(id: id, menuName: menuName);
+  GroupPermissionMenu toEntity() => GroupPermissionMenu(
+    id: id,
+    menuCode: menuCode,
+    menuName: menuName,
+    path: path,
+  );
 }
 
 /// 문자열/DateTime 값을 파싱해 [DateTime]으로 변환한다.

lib/features/masters/group_permission/data/repositories/group_permission_repository_remote.dart

@@ -1,6 +1,7 @@
 import 'package:dio/dio.dart';
 import 'package:superport_v2/core/common/models/paginated_result.dart';
 import 'package:superport_v2/core/network/api_client.dart';
+import 'package:superport_v2/core/network/api_routes.dart';
 
 import '../../domain/entities/group_permission.dart';
 import '../../domain/repositories/group_permission_repository.dart';
@@ -13,7 +14,7 @@ class GroupPermissionRepositoryRemote implements GroupPermissionRepository {
 
   final ApiClient _api;
 
-  static const _basePath = '/group-menu-permissions';
+  static const _basePath = '${ApiRoutes.apiV1}/group-menu-permissions';
 
   /// 그룹 권한 목록을 조회한다.
   @override

lib/features/masters/group_permission/domain/entities/group_permission.dart

@@ -70,10 +70,17 @@ class GroupPermissionGroup {
 }
 
 class GroupPermissionMenu {
-  GroupPermissionMenu({required this.id, required this.menuName});
+  GroupPermissionMenu({
+    required this.id,
+    required this.menuCode,
+    required this.menuName,
+    this.path,
+  });
 
   final int id;
+  final String menuCode;
   final String menuName;
+  final String? path;
 }
 
 /// 그룹 권한 생성/수정 입력 모델

lib/features/masters/group_permission/domain/mappers/group_permission_mapper.dart

@@ -0,0 +1,34 @@
+import 'package:superport_v2/core/permissions/permission_manager.dart';
+import 'package:superport_v2/core/permissions/permission_resources.dart';
+
+import '../entities/group_permission.dart';
+
+/// 그룹-메뉴 권한 목록을 [PermissionManager]에 적용할 수 있는 맵으로 변환한다.
+///
+/// - 메뉴 경로([GroupPermissionMenu.path])가 비어 있으면 해당 항목은 건너뛴다.
+/// - 읽기 권한은 [PermissionAction.view]로 매핑하고, CRUD 권한은 각각 대응한다.
+Map<String, Set<PermissionAction>> buildPermissionMap(
+  Iterable<GroupPermission> permissions,
+) {
+  final result = <String, Set<PermissionAction>>{};
+  for (final permission in permissions) {
+    final path = PermissionResources.normalize(permission.menu.path ?? '');
+    if (path.isEmpty) {
+      continue;
+    }
+    final actions = result.putIfAbsent(path, () => <PermissionAction>{});
+    if (permission.canRead) {
+      actions.add(PermissionAction.view);
+    }
+    if (permission.canCreate) {
+      actions.add(PermissionAction.create);
+    }
+    if (permission.canUpdate) {
+      actions.add(PermissionAction.edit);
+    }
+    if (permission.canDelete) {
+      actions.add(PermissionAction.delete);
+    }
+  }
+  return result;
+}

lib/features/masters/group_permission/presentation/controllers/group_permission_controller.dart

@@ -1,6 +1,9 @@
 import 'package:flutter/foundation.dart';
 import 'package:superport_v2/core/common/models/paginated_result.dart';
+import 'package:superport_v2/core/network/failure.dart';
 
+import '../../../../../core/permissions/permission_manager.dart';
+import '../../application/permission_synchronizer.dart';
 import '../../../group/domain/entities/group.dart';
 import '../../../group/domain/repositories/group_repository.dart';
 import '../../../menu/domain/entities/menu.dart';
@@ -20,13 +23,16 @@ class GroupPermissionController extends ChangeNotifier {
     required GroupPermissionRepository permissionRepository,
     required GroupRepository groupRepository,
     required MenuRepository menuRepository,
+    PermissionManager? permissionManager,
   }) : _permissionRepository = permissionRepository,
        _groupRepository = groupRepository,
-       _menuRepository = menuRepository;
+       _menuRepository = menuRepository,
+       _permissionManager = permissionManager;
 
   final GroupPermissionRepository _permissionRepository;
   final GroupRepository _groupRepository;
   final MenuRepository _menuRepository;
+  final PermissionManager? _permissionManager;
 
   PaginatedResult<GroupPermission>? _result;
   bool _isLoading = false;
@@ -63,8 +69,9 @@ class GroupPermissionController extends ChangeNotifier {
       _groups
         ..clear()
         ..addAll(response.items);
-    } catch (e) {
-      _errorMessage = e.toString();
+    } catch (error) {
+      final failure = Failure.from(error);
+      _errorMessage = failure.describe();
     } finally {
       _isLoadingGroups = false;
       notifyListeners();
@@ -84,8 +91,9 @@ class GroupPermissionController extends ChangeNotifier {
       _menus
         ..clear()
         ..addAll(response.items);
-    } catch (e) {
-      _errorMessage = e.toString();
+    } catch (error) {
+      final failure = Failure.from(error);
+      _errorMessage = failure.describe();
     } finally {
       _isLoadingMenus = false;
       notifyListeners();
@@ -112,8 +120,9 @@ class GroupPermissionController extends ChangeNotifier {
         includeDeleted: _includeDeleted,
       );
       _result = response;
-    } catch (e) {
-      _errorMessage = e.toString();
+    } catch (error) {
+      final failure = Failure.from(error);
+      _errorMessage = failure.describe();
     } finally {
       _isLoading = false;
       notifyListeners();
@@ -150,9 +159,11 @@ class GroupPermissionController extends ChangeNotifier {
     try {
       final created = await _permissionRepository.create(input);
       await fetch(page: 1);
+      await _syncPermissionsForGroup(input.groupId);
       return created;
-    } catch (e) {
-      _errorMessage = e.toString();
+    } catch (error) {
+      final failure = Failure.from(error);
+      _errorMessage = failure.describe();
       notifyListeners();
       return null;
     } finally {
@@ -166,9 +177,11 @@ class GroupPermissionController extends ChangeNotifier {
     try {
       final updated = await _permissionRepository.update(id, input);
       await fetch(page: _result?.page ?? 1);
+      await _syncPermissionsForGroup(input.groupId);
       return updated;
-    } catch (e) {
-      _errorMessage = e.toString();
+    } catch (error) {
+      final failure = Failure.from(error);
+      _errorMessage = failure.describe();
       notifyListeners();
       return null;
     } finally {
@@ -180,11 +193,16 @@ class GroupPermissionController extends ChangeNotifier {
   Future<bool> delete(int id) async {
     _setSubmitting(true);
     try {
+      final groupId = _resolveGroupIdForPermission(id);
       await _permissionRepository.delete(id);
       await fetch(page: _result?.page ?? 1);
+      if (groupId != null) {
+        await _syncPermissionsForGroup(groupId);
+      }
       return true;
-    } catch (e) {
-      _errorMessage = e.toString();
+    } catch (error) {
+      final failure = Failure.from(error);
+      _errorMessage = failure.describe();
       notifyListeners();
       return false;
     } finally {
@@ -198,9 +216,11 @@ class GroupPermissionController extends ChangeNotifier {
     try {
       final restored = await _permissionRepository.restore(id);
       await fetch(page: _result?.page ?? 1);
+      await _syncPermissionsForGroup(restored.group.id);
       return restored;
-    } catch (e) {
-      _errorMessage = e.toString();
+    } catch (error) {
+      final failure = Failure.from(error);
+      _errorMessage = failure.describe();
       notifyListeners();
       return null;
     } finally {
@@ -219,4 +239,33 @@ class GroupPermissionController extends ChangeNotifier {
     _isSubmitting = value;
     notifyListeners();
   }
+
+  Future<void> _syncPermissionsForGroup(int groupId) async {
+    final manager = _permissionManager;
+    if (manager == null) {
+      return;
+    }
+    try {
+      final synchronizer = PermissionSynchronizer(
+        repository: _permissionRepository,
+        manager: manager,
+      );
+      await synchronizer.syncForGroup(groupId);
+    } catch (_) {
+      // 권한 동기화 실패는 사용자 경험에 영향이 없도록 무시한다.
+    }
+  }
+
+  int? _resolveGroupIdForPermission(int permissionId) {
+    final current = _result?.items;
+    if (current == null) {
+      return null;
+    }
+    for (final item in current) {
+      if (item.id == permissionId) {
+        return item.group.id;
+      }
+    }
+    return null;
+  }
 }

lib/features/masters/group_permission/presentation/pages/group_permission_page.dart

@@ -9,6 +9,7 @@ import 'package:superport_v2/widgets/components/filter_bar.dart';
 import 'package:superport_v2/widgets/components/superport_dialog.dart';
 
 import '../../../../../core/config/environment.dart';
+import '../../../../../core/permissions/permission_manager.dart';
 import '../../../../../widgets/spec_page.dart';
 import '../../../group/domain/entities/group.dart';
 import '../../../group/domain/repositories/group_repository.dart';
@@ -118,14 +119,27 @@ class _GroupPermissionEnabledPageState
   final intl.DateFormat _dateFormat = intl.DateFormat('yyyy-MM-dd HH:mm');
   String? _lastError;
 
+  bool _initialized = false;
+
   @override
   void initState() {
     super.initState();
+  }
+
+  @override
+  void didChangeDependencies() {
+    super.didChangeDependencies();
+    if (_initialized) {
+      return;
+    }
+    final permissionManager = PermissionScope.of(context);
     _controller = GroupPermissionController(
       permissionRepository: GetIt.I<GroupPermissionRepository>(),
       groupRepository: GetIt.I<GroupRepository>(),
       menuRepository: GetIt.I<MenuRepository>(),
+      permissionManager: permissionManager,
     )..addListener(_handleControllerUpdate);
+    _initialized = true;
     WidgetsBinding.instance.addPostFrameCallback((_) async {
       await _controller.loadGroups();
       await _controller.loadMenus();