权限监控与管理界面全面美化

重新设计权限系统所有 UI 组件的视觉风格，统一配色、圆角、阴影和交互动效：
- 实时概览：统计卡片加图标和渐变色条，健康评分改为环形进度，告警改为卡片式
- 趋势分析：图表卡片加彩色图标标识，ECharts 配色升级为渐变面积填充
- 访问日志：指标卡片带图标，日志审计改为卡片式入口，IP排行前三高亮
- IP属地：工具栏重设计，排行列表前三渐变高亮，指标卡片统一新风格
- 系统级权限：从 el-table 改为自定义卡片列表，模块块独立圆角卡片
- 项目权限配置：空状态引导优化，成员表格加头像，工具栏加背景容器
- 角色概览卡片：加进度条可视化，hover 微动效
- 接口权限矩阵：工具栏分离布局，表格圆角包裹
- 角色管理抽屉：侧边栏选中态渐变，操作行 hover 高亮

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>

backend/app/api/v1/api_permissions.py

@@ -16,6 +16,7 @@ from app.core.project_permissions import (
     get_missing_prerequisites,
 )
 from app.models.api_endpoint_registry import ApiEndpointRegistry
+from app.models.study import Study
 from app.core.api_permissions import API_ENDPOINT_PERMISSIONS, PROJECT_PERMISSION_ROLES, OPERATION_PREREQUISITES
 
 router = APIRouter(prefix="/api-permissions", tags=["api-permissions"])
@@ -24,6 +25,13 @@ router = APIRouter(prefix="/api-permissions", tags=["api-permissions"])
 study_router = APIRouter(prefix="/api-permissions", tags=["api-permissions"])
 
 
+async def _get_configurable_roles(db: AsyncSession, study_id: uuid.UUID) -> list[str]:
+    result = await db.execute(select(Study).where(Study.id == study_id))
+    study = result.scalar_one_or_none()
+    active_roles = [role for role in (study.active_roles if study else []) if isinstance(role, str) and role.strip()]
+    return list(dict.fromkeys([*PROJECT_PERMISSION_ROLES, *active_roles]))
+
+
 @router.get(
     "/operations",
     summary="获取系统中所有权限操作",
@@ -167,7 +175,7 @@ async def get_study_api_permissions(
 
     # 构建返回格式（get_api_endpoint_permissions 已返回 {role: {key: {"allowed": bool}}}）
     result: dict[str, dict[str, dict[str, bool]]] = {}
-    for role in PROJECT_PERMISSION_ROLES:
+    for role in await _get_configurable_roles(db, study_id):
         if role == "ADMIN":
             continue
         result[role] = {}
@@ -203,10 +211,11 @@ async def update_study_api_permissions(
     }
     """
     # 验证输入
+    configurable_roles = set(await _get_configurable_roles(db, study_id))
     for role in payload.keys():
         if role == "ADMIN":
             continue
-        if role not in PROJECT_PERMISSION_ROLES:
+        if role not in configurable_roles:
             raise ValueError(f"无效的角色: {role}")
 
     # 替换权限配置
@@ -216,7 +225,7 @@ async def update_study_api_permissions(
     permissions = await get_api_endpoint_permissions(db, study_id)
 
     result: dict[str, dict[str, dict[str, bool]]] = {}
-    for role in PROJECT_PERMISSION_ROLES:
+    for role in await _get_configurable_roles(db, study_id):
         if role == "ADMIN":
             continue
         result[role] = {}