管理后台前后端逻辑、UI美化

backend/app/api/v1/attachments.py

@@ -8,7 +8,7 @@ from fastapi import APIRouter, Depends, File, HTTPException, UploadFile, status,
 from fastapi.responses import FileResponse
 from sqlalchemy.ext.asyncio import AsyncSession
 
-from app.core.deps import get_current_user, get_db_session, require_study_member, get_study_member
+from app.core.deps import get_current_user, get_db_session, require_study_member, get_study_member, require_study_not_locked
 from app.crud import attachment as attachment_crud
 from app.crud import audit as audit_crud
 from app.crud import study as study_crud
@@ -41,7 +41,7 @@ async def _ensure_study_exists(db: AsyncSession, study_id: uuid.UUID):
     "/",
     response_model=AttachmentRead,
     status_code=status.HTTP_201_CREATED,
-    dependencies=[Depends(require_study_member())],
+    dependencies=[Depends(require_study_member()), Depends(require_study_not_locked())],
 )
 async def upload_attachment(
     study_id: uuid.UUID,
@@ -281,7 +281,7 @@ async def global_delete_attachment(
 @router.delete(
     "/{attachment_id}",
     status_code=status.HTTP_204_NO_CONTENT,
-    dependencies=[Depends(require_study_member())],
+    dependencies=[Depends(require_study_member()), Depends(require_study_not_locked())],
 )
 async def delete_attachment(
     study_id: uuid.UUID,