{
  "permissions": "权限",
  "permissionsDesc": "按角色加减能力；系统提供默认，可一键还原。",
  "rolePolicy": "角色策略",
  "dirty": "已自定义",
  "factory": "系统默认",
  "maxLevel": "最高等级",
  "save": "保存策略",
  "saved": "已保存 {{role}} 权限策略",
  "restoreRole": "还原此角色默认",
  "restoreAll": "还原全部角色",
  "restoreRoleTitle": "将 {{role}} 还原为系统默认？",
  "restoreRoleDesc": "将清除此角色的自定义能力，恢复出厂设置。",
  "restoreAllTitle": "将全部角色还原为系统默认？",
  "restoreAllDesc": "所有角色的自定义策略都会被清除。",
  "restoredRole": "已还原 {{role}}",
  "restoredAll": "已还原全部角色默认",
  "bandAllOn": "全开",
  "bandAllOff": "全关",
  "diffFromFactory": "与默认不同",
  "effectivePreview": "有效能力预览",
  "userOverrides": "个人加减",
  "extraGrants": "额外授予",
  "extraRevokes": "额外撤销",
  "restoreUserOverrides": "还原此用户覆盖",
  "restoreUserOverridesTitle": "清除 {{name}} 的个人权限覆盖？",
  "restoreUserOverridesDesc": "只清除额外授予/撤销，角色策略不变。",
  "overridesBadge": "有覆盖",
  "promoteAdminTitle": "提升为 Admin？",
  "promoteAdminDesc": "Admin 默认可管理用户、改权限、模拟登录、还原备份等。请确认。",
  "level": {
    "read": "读取",
    "write-low": "低危写入",
    "write-high": "高危写入",
    "destructive": "破坏性",
    "privilege": "特权"
  },
  "cap": {
    "dashboardRead": "总览",
    "logsRead": "日志",
    "metricsRead": "监控指标",
    "projectsRead": "项目（读）",
    "mailRead": "邮件（读）",
    "dnsRead": "DNS（读）",
    "sslRead": "SSL（读）",
    "backupsRead": "备份（读）",
    "updatesRead": "更新（读）",
    "servicesRead": "服务（读）",
    "firewallRead": "防火墙（读）",
    "approvalsView": "审批（看）",
    "usersSelf": "个人设置/2FA",
    "projectsWrite": "项目创建改",
    "mailWrite": "邮箱/别名",
    "dbWrite": "数据库创建",
    "sslUpload": "上传证书",
    "filesProject": "项目文件",
    "approvalsRespond": "审批处理",
    "cronManage": "Cron 管理",
    "servicesControl": "服务控制",
    "updatesApply": "套件更新执行",
    "dnsApply": "DNS 应用",
    "sslIssue": "签发 SSL",
    "publishApply": "发布/Nginx",
    "firewallEdit": "防火墙编辑",
    "mailApply": "邮件应用",
    "runtimeTuning": "运行时调参",
    "mysqlConsoleWrite": "MySQL 写入",
    "projectsDelete": "删除项目",
    "dbDrop": "删除数据库",
    "backupsRun": "执行备份",
    "backupsRestore": "备份还原",
    "firewallFlush": "清空防火墙",
    "logsPurge": "清除日志",
    "usersManage": "用户管理",
    "packagesManage": "方案管理",
    "usersImpersonate": "模拟登录",
    "securityPolicy": "安全策略",
    "rbacPolicy": "权限策略",
    "settingsSystem": "系统设置",
    "auditExport": "审计导出",
    "securityApiKeysAdmin": "API 密钥管理",
    "networkBrowse": "主機代瀏覽",
    "networkVnc": "VNC 远程桌面管理",
    "validatorsRead": "验证者节点（读取）",
    "validatorsManage": "验证者节点管理",
    "validatorsWipe": "验证者节点清空数据",
    "dockerRead": "Docker（读取）",
    "dockerManage": "Docker 管理",
    "dockerWipe": "Docker 删除／清理"
  },
  "aboutRoles": "角色说明（出厂默认）",
  "aboutRolesBody": "角色决定默认权限；用户可再覆盖个别能力。",
  "aboutQuota": "配额说明",
  "aboutQuotaBody": "方案配额目前以面板/主机总量为主闸，并非完整多租户硬隔离。用量条若显示 host totals，即表示全机统计。",
  "dangerPolicyTitle": "授予破坏性/特权能力？",
  "dangerPolicyDesc": "你正在为该角色加入 destructive 或 privilege 能力，或提高 maxLevel。请确认风险后再保存。",
  "needRbacPolicy": "需要 rbac.policy 才能编辑角色策略。",
  "adminLockedFull": "Admin 全开（锁定）",
  "adminLockedHint": "Admin 系统角色永远功能全开，不可削减。请改 Operator/Viewer/Agent，或对非 admin 用户做个人加减。",
  "maxLevelHint": "高于此等级的能力组会自动锁定，无法开启。",
  "capabilities": "能力清单",
  "capabilitiesHint": "勾选此角色可用的功能。橙点表示与系统默认不同。",
  "enabledCount": "已开 {{enabled}}／{{total}}",
  "bandAboveMax": "高于最高等级",
  "roleUnavailable": "此角色不可用",
  "dirtyHint": "已自定义（与系统默认不同）",
  "unsaved": "未储存",
  "unsavedHint": "此角色有未储存变更",
  "nothingToSave": "没有要储存的变更",
  "saveRole": "储存「{{role}}」政策",
  "discardTitle": "舍弃变更？",
  "discardDesc": "未保存的权限变更将会舍弃。"
}