The two new suggest-colors/suggest-sizes endpoints were missing from the purchaser permission matrix, so any non-super-admin account got "没有该接口访问权限" from AuthCheckRole even after the server was rebuilt. Add both to AdminAPIs alongside the existing mapping-edit and preview-auto-size entries so ReconcilePurchaserPermissions seeds the sys_api/casbin rows on next startup. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01VkjpksKeizaRpYXfgD74Lf