# Audit_Firm_v2.0.3.2

Phase 2 adds permission guards on top of v2.0.3.1:
- central permission registry
- reusable permission guard for UI and API
- permission-aware sidebar/menu
- UI route protection for Users, RBAC, and System Settings
- FastAPI dependencies now raise HTTP 403 instead of generic PermissionError
- template helper functions for button and menu visibility