管理后台前后端逻辑、UI美化

backend/app/api/v1/drug_shipments.py

@@ -3,7 +3,7 @@ import uuid
 from fastapi import APIRouter, Depends, HTTPException, status
 from sqlalchemy.ext.asyncio import AsyncSession
 
-from app.core.deps import get_current_user, get_db_session, require_study_member, require_study_roles
+from app.core.deps import get_current_user, get_db_session, require_study_member, require_study_roles, require_study_not_locked
 from app.crud import audit as audit_crud
 from app.crud import drug_shipment as shipment_crud
 from app.crud import site as site_crud
@@ -20,11 +20,20 @@ async def _ensure_study_exists(db: AsyncSession, study_id: uuid.UUID):
     return study
 
 
+async def _ensure_center_active(db: AsyncSession, study_id: uuid.UUID, center_id: uuid.UUID | None):
+    if not center_id:
+        return None
+    site = await site_crud.get_site(db, center_id)
+    if not site or site.study_id != study_id or not site.is_active:
+        raise HTTPException(status_code=status.HTTP_404_NOT_FOUND, detail="中心已停用")
+    return site
+
+
 @router.post(
     "/shipments",
     response_model=DrugShipmentRead,
     status_code=status.HTTP_201_CREATED,
-    dependencies=[Depends(require_study_roles(["PM", "CRA"]))],
+    dependencies=[Depends(require_study_roles(["PM", "CRA"])), Depends(require_study_not_locked())],
 )
 async def create_shipment(
     study_id: uuid.UUID,
@@ -33,9 +42,7 @@ async def create_shipment(
     current_user=Depends(get_current_user),
 ) -> DrugShipmentRead:
     await _ensure_study_exists(db, study_id)
-    site = await site_crud.get_site(db, shipment_in.center_id)
-    if not site or site.study_id != study_id:
-        raise HTTPException(status_code=status.HTTP_400_BAD_REQUEST, detail="分中心不存在")
+    site = await _ensure_center_active(db, study_id, shipment_in.center_id)
     shipment_in = shipment_in.model_copy(update={"site_name": site.name})
     shipment = await shipment_crud.create_shipment(db, study_id, shipment_in, created_by=current_user.id)
     await audit_crud.log_action(
@@ -102,7 +109,7 @@ async def get_shipment(
 @router.patch(
     "/shipments/{shipment_id}",
     response_model=DrugShipmentRead,
-    dependencies=[Depends(require_study_roles(["PM", "CRA"]))],
+    dependencies=[Depends(require_study_roles(["PM", "CRA"])), Depends(require_study_not_locked())],
 )
 async def update_shipment(
     study_id: uuid.UUID,
@@ -116,10 +123,10 @@ async def update_shipment(
     if not shipment or shipment.study_id != study_id:
         raise HTTPException(status_code=status.HTTP_404_NOT_FOUND, detail="运输记录不存在")
     if shipment_in.center_id:
-        site = await site_crud.get_site(db, shipment_in.center_id)
-        if not site or site.study_id != study_id:
-            raise HTTPException(status_code=status.HTTP_400_BAD_REQUEST, detail="分中心不存在")
+        site = await _ensure_center_active(db, study_id, shipment_in.center_id)
         shipment_in = shipment_in.model_copy(update={"site_name": site.name})
+    else:
+        await _ensure_center_active(db, study_id, shipment.center_id)
     shipment = await shipment_crud.update_shipment(db, shipment, shipment_in)
     await audit_crud.log_action(
         db,
@@ -137,7 +144,7 @@ async def update_shipment(
 @router.delete(
     "/shipments/{shipment_id}",
     status_code=status.HTTP_204_NO_CONTENT,
-    dependencies=[Depends(require_study_roles(["PM", "CRA"]))],
+    dependencies=[Depends(require_study_roles(["PM", "CRA"])), Depends(require_study_not_locked())],
 )
 async def delete_shipment(
     study_id: uuid.UUID,
@@ -149,6 +156,7 @@ async def delete_shipment(
     shipment = await shipment_crud.get_shipment(db, shipment_id)
     if not shipment or shipment.study_id != study_id:
         raise HTTPException(status_code=status.HTTP_404_NOT_FOUND, detail="运输记录不存在")
+    await _ensure_center_active(db, study_id, shipment.center_id)
     await shipment_crud.delete_shipment(db, shipment)
     await audit_crud.log_action(
         db,