管理后台前后端逻辑、UI美化

backend/app/api/v1/fees_contracts.py

@@ -6,7 +6,7 @@ from fastapi import APIRouter, Depends, HTTPException, Query, status
 from sqlalchemy.ext.asyncio import AsyncSession
 from sqlalchemy import select
 
-from app.core.deps import get_current_user, get_db_session
+from app.core.deps import get_current_user, get_db_session, require_study_not_locked
 from app.crud import audit as audit_crud
 from app.crud import contract_fee as contract_fee_crud
 from app.crud import contract_fee_payment as payment_crud
@@ -43,6 +43,14 @@ async def _ensure_project_access(db: AsyncSession, project_id: uuid.UUID, curren
     return membership
 
 
+async def _ensure_center_active(db: AsyncSession, project_id: uuid.UUID, center_id: uuid.UUID | None):
+    if not center_id:
+        return
+    site = await site_crud.get_site(db, center_id)
+    if not site or site.study_id != project_id or not site.is_active:
+        raise HTTPException(status_code=status.HTTP_404_NOT_FOUND, detail="中心已停用")
+
+
 def _to_decimal(value: Any) -> Decimal:
     if isinstance(value, Decimal):
         return value
@@ -186,7 +194,7 @@ async def get_contract_fee(
     "/contracts",
     response_model=FeeApiResponse[ContractFeeRead],
     status_code=status.HTTP_201_CREATED,
-    dependencies=[Depends(get_current_user)],
+    dependencies=[Depends(get_current_user), Depends(require_study_not_locked())],
 )
 async def create_contract_fee(
     contract_in: ContractFeeCreate,
@@ -201,8 +209,8 @@ async def create_contract_fee(
         raise HTTPException(status_code=status.HTTP_409_CONFLICT, detail="该中心已存在合同费用")
 
     site = await site_crud.get_site(db, contract_in.center_id)
-    if not site or site.study_id != contract_in.project_id:
-        raise HTTPException(status_code=status.HTTP_400_BAD_REQUEST, detail="中心不存在或不属于该项目")
+    if not site or site.study_id != contract_in.project_id or not site.is_active:
+        raise HTTPException(status_code=status.HTTP_400_BAD_REQUEST, detail="中心不存在或已停用")
 
     contract = await contract_fee_crud.create_contract_fee(db, contract_in)
     await audit_crud.log_action(
@@ -221,7 +229,7 @@ async def create_contract_fee(
 @router.patch(
     "/contracts/{contract_id}",
     response_model=FeeApiResponse[ContractFeeRead],
-    dependencies=[Depends(get_current_user)],
+    dependencies=[Depends(get_current_user), Depends(require_study_not_locked())],
 )
 async def update_contract_fee(
     contract_id: uuid.UUID,
@@ -233,6 +241,7 @@ async def update_contract_fee(
     if not contract:
         raise HTTPException(status_code=status.HTTP_404_NOT_FOUND, detail="合同费用不存在")
     await _ensure_project_access(db, contract.project_id, current_user, write=True)
+    await _ensure_center_active(db, contract.project_id, contract.center_id)
     contract = await contract_fee_crud.update_contract_fee(db, contract, contract_in)
     await audit_crud.log_action(
         db,
@@ -250,7 +259,7 @@ async def update_contract_fee(
 @router.delete(
     "/contracts/{contract_id}",
     status_code=status.HTTP_204_NO_CONTENT,
-    dependencies=[Depends(get_current_user)],
+    dependencies=[Depends(get_current_user), Depends(require_study_not_locked())],
 )
 async def delete_contract_fee(
     contract_id: uuid.UUID,
@@ -261,6 +270,7 @@ async def delete_contract_fee(
     if not contract:
         raise HTTPException(status_code=status.HTTP_404_NOT_FOUND, detail="合同费用不存在")
     await _ensure_project_access(db, contract.project_id, current_user, write=True)
+    await _ensure_center_active(db, contract.project_id, contract.center_id)
     await contract_fee_crud.delete_contract_fee(db, contract)
     await audit_crud.log_action(
         db,
@@ -278,7 +288,7 @@ async def delete_contract_fee(
     "/contracts/{contract_id}/payments",
     response_model=FeeApiResponse[ContractFeePaymentRead],
     status_code=status.HTTP_201_CREATED,
-    dependencies=[Depends(get_current_user)],
+    dependencies=[Depends(get_current_user), Depends(require_study_not_locked())],
 )
 async def create_contract_payment(
     contract_id: uuid.UUID,
@@ -308,7 +318,7 @@ async def create_contract_payment(
 @router.patch(
     "/payments/{payment_id}",
     response_model=FeeApiResponse[ContractFeePaymentRead],
-    dependencies=[Depends(get_current_user)],
+    dependencies=[Depends(get_current_user), Depends(require_study_not_locked())],
 )
 async def update_contract_payment(
     payment_id: uuid.UUID,
@@ -349,7 +359,7 @@ async def update_contract_payment(
 @router.delete(
     "/payments/{payment_id}",
     status_code=status.HTTP_204_NO_CONTENT,
-    dependencies=[Depends(get_current_user)],
+    dependencies=[Depends(get_current_user), Depends(require_study_not_locked())],
 )
 async def delete_contract_payment(
     payment_id: uuid.UUID,