清理全局角色残留并修复项目权限判断

backend/app/api/v1/permission_monitoring.py

@@ -14,7 +14,7 @@ from fastapi import APIRouter, Depends, HTTPException, Query, status
 from sqlalchemy import func, select, desc
 from sqlalchemy.ext.asyncio import AsyncSession
 
-from app.core.deps import get_current_user, get_db_session, list_active_pm_study_ids
+from app.core.deps import get_current_user, get_db_session, is_system_admin, list_active_pm_study_ids
 from app.core.permission_monitor import get_permission_monitor
 from app.models.permission_access_log import PermissionAccessLog
 from app.models.permission_metric_snapshot import PermissionMetricSnapshot
@@ -36,14 +36,8 @@ class MonitoringScope:
         return study_id is not None and study_id in self.study_ids
 
 
-def _role_value(user) -> str:
-    if not hasattr(user, "role"):
-        return "ADMIN"
-    return user.role.value if hasattr(user.role, "value") else str(user.role)
-
-
 async def resolve_monitoring_scope(db: AsyncSession, current_user) -> MonitoringScope:
-    if _role_value(current_user) == "ADMIN":
+    if is_system_admin(current_user):
         return MonitoringScope(is_admin=True, study_ids=set())
     return MonitoringScope(
         is_admin=False,