中文：收口权限与中心/立项配置改造

2026-05-12 10:16:52 +08:00
parent 6e90370a5f
commit 77e842637d
67 changed files with 706 additions and 669 deletions
@@ -54,7 +54,7 @@ async def _ensure_project_access(db: AsyncSession, project_id: uuid.UUID, curren
    membership = await member_crud.get_member(db, project_id, current_user.id)
    if not membership or not membership.is_active:
        raise HTTPException(status_code=status.HTTP_403_FORBIDDEN, detail="不是项目成员")
-    if write and membership.role_in_study != "PM":
+    if write and membership.role_in_study not in {"ADMIN", "PM"}:
        raise HTTPException(status_code=status.HTTP_403_FORBIDDEN, detail="项目权限不足")
    return membership