优化

lastleg-service/src/test/java/com/baiyue/lastleg/inboundplan/controller/InboundPlanPermissionContractTest.java

@@ -13,6 +13,7 @@ import static org.junit.jupiter.api.Assertions.assertEquals;
 
 class InboundPlanPermissionContractTest {
     private static final String LIST = "platform:overseas-warehouse:inbound-order:list";
+    private static final String CREATE = "platform:overseas-warehouse:inbound-order:create";
     private static final String FBA_APPOINTMENT =
         "platform:overseas-warehouse:inbound-order:fba-appointment";
 
@@ -28,6 +29,17 @@ class InboundPlanPermissionContractTest {
         }
     }
 
+    @Test
+    void conversionUsesCanonicalInboundOrderCreateAuthority() {
+        Method method = Arrays.stream(InboundPlanController.class.getDeclaredMethods())
+            .filter(candidate -> candidate.getName().equals("convert"))
+            .findFirst()
+            .orElseThrow();
+
+        assertEquals("hasAuthority('" + CREATE + "')", method.getAnnotation(PreAuthorize.class).value());
+        assertEquals("Required authority: " + CREATE, method.getAnnotation(Operation.class).description());
+    }
+
     @Test
     void fbaAppointmentWritesUseDedicatedAuthority() {
         Map<String, Method> methods = Arrays.stream(InboundPlanController.class.getDeclaredMethods())