fix: align admin behavior and Kratos integrations

internal/server/middleware/access.go

@@ -2,7 +2,10 @@ package middleware
 
 import (
 	"net/http"
+	"strings"
 
+	"kra/internal/biz"
+	"kra/internal/conf"
 	"kra/internal/server/httpx"
 	"kra/internal/service"
 	"kra/internal/service/dto"
@@ -10,7 +13,7 @@ import (
 	"github.com/gin-gonic/gin"
 )
 
-func AccessControl(access *service.AccessService, audit *service.AuditService) gin.HandlerFunc {
+func AccessControl(runtime *conf.Runtime, access *service.AccessService, audit *service.AuditService) gin.HandlerFunc {
 	return func(c *gin.Context) {
 		claims := Claims(c)
 		if claims == nil {
@@ -18,7 +21,14 @@ func AccessControl(access *service.AccessService, audit *service.AuditService) g
 			return
 		}
 		path := c.Request.URL.Path
-		allowed, err := access.Authorize(c.Request.Context(), claims.AuthorityID, path, c.Request.Method)
+		policyPath := path
+		if config := runtime.Admin(); config != nil && config.RouterPrefix != "" {
+			policyPath = strings.TrimPrefix(policyPath, strings.TrimSuffix(config.RouterPrefix, "/"))
+			if policyPath == "" {
+				policyPath = "/"
+			}
+		}
+		allowed, err := access.Authorize(c.Request.Context(), claims.AuthorityID, policyPath, c.Request.Method)
 		if err != nil || !allowed {
 			requestID, _ := c.Get("request_id")
 			requestIDText, _ := requestID.(string)
@@ -31,6 +41,7 @@ func AccessControl(access *service.AccessService, audit *service.AuditService) g
 			httpx.Fail(c, "数据权限加载失败")
 			return
 		}
+		requestContext = biz.NewActorContext(requestContext, biz.Actor{UserID: claims.ID, AuthorityID: claims.AuthorityID})
 		c.Request = c.Request.WithContext(requestContext)
 		c.Next()
 	}