fix(auth): enforce document and govdoc route grants

fastapi_modules/fastapi_leaudit/services/impl/entryModuleAdminServiceImpl.py

@@ -51,7 +51,7 @@ _ALLOWED_FEATURES = {
 _DEFAULT_FEATURES_BY_PROFILE = {
     "document_review": ["home", "documents", "upload", "rules", "rule_groups"],
     "contract": ["home", "documents", "upload", "rules", "contract_template_search", "contract_template_list"],
-    "govdoc": ["home", "govdoc_audits", "govdoc_upload", "rule_groups"],
+    "govdoc": ["home", "govdoc_audits", "govdoc_upload", "rules"],
     "cross_checking": ["cross_checking", "cross_checking_upload", "cross_checking_list"],
     "custom": ["home", "documents"],
 }
@@ -884,6 +884,8 @@ class EntryModuleAdminServiceImpl(IEntryModuleAdminService):
             feature = str(item or "").strip()
             if not feature:
                 continue
+            if MenuProfile == "govdoc" and feature == "rule_groups":
+                feature = "rules"
             if feature not in _ALLOWED_FEATURES:
                 invalid.append(feature)
                 continue
@@ -915,6 +917,8 @@ class EntryModuleAdminServiceImpl(IEntryModuleAdminService):
         normalized: list[str] = []
         for item in Features:
             feature = str(item or "").strip()
+            if MenuProfile == "govdoc" and feature == "rule_groups":
+                feature = "rules"
             if feature in _ALLOWED_FEATURES and feature not in normalized:
                 normalized.append(feature)
         return normalized or list(_DEFAULT_FEATURES_BY_PROFILE.get(MenuProfile, _DEFAULT_FEATURES_BY_PROFILE["document_review"]))