185f55cec6
The axios response interceptor was discarding the server's permission-denied message (e.g. "缺少「用户列表」权限") and replacing it with a generic "无权限". Now it reads the server response body and surfaces the exact permission that's missing.