中文：收口权限与中心/立项配置改造

backend/app/api/v1/dashboard.py

@@ -4,6 +4,7 @@ from sqlalchemy import func, select
 from sqlalchemy.ext.asyncio import AsyncSession
 
 from app.core.deps import get_cra_site_scope, get_current_user, get_db_session, require_study_member
+from app.crud import member as member_crud
 from app.models.milestone import Milestone
 from app.schemas.progress import StudyProgressRead
 from app.schemas.visit import VisitLostItem
@@ -14,6 +15,10 @@ from app.crud import overview as overview_crud
 router = APIRouter()
 
 
+def _role_value(user) -> str:
+    return user.role.value if hasattr(user.role, "value") else str(user.role)
+
+
 @router.get("/progress", response_model=StudyProgressRead, dependencies=[Depends(require_study_member())])
 async def get_progress(
     study_id: uuid.UUID,
@@ -68,8 +73,12 @@ async def get_center_summary(
     db: AsyncSession = Depends(get_db_session),
     current_user=Depends(get_current_user),
 ) -> list[CenterSummaryItem]:
-    role_value = current_user.role.value if hasattr(current_user.role, "value") else current_user.role
-    if role_value not in {"ADMIN", "PM", "CRA"}:
+    role_value = _role_value(current_user)
+    member_role = None
+    if role_value != "ADMIN":
+        membership = await member_crud.get_member(db, study_id, current_user.id)
+        member_role = membership.role_in_study if membership and membership.is_active else None
+    if role_value != "ADMIN" and member_role not in {"PM", "CRA"}:
         return []
     cra_scope = await get_cra_site_scope(db, study_id, current_user)
     scope_ids = cra_scope[0] if cra_scope else None