管理后台前后端逻辑、UI美化

backend/app/api/v1/fees_specials.py

@@ -4,7 +4,7 @@ from datetime import date
 from fastapi import APIRouter, Depends, HTTPException, Query, status
 from sqlalchemy.ext.asyncio import AsyncSession
 
-from app.core.deps import get_current_user, get_db_session
+from app.core.deps import get_current_user, get_db_session, require_study_not_locked
 from app.crud import audit as audit_crud
 from app.crud import member as member_crud
 from app.crud import special_expense as special_crud
@@ -52,6 +52,14 @@ def _validate_category(value: str | None):
         raise HTTPException(status_code=status.HTTP_400_BAD_REQUEST, detail="费用类别无效")
 
 
+async def _ensure_center_active(db: AsyncSession, project_id: uuid.UUID, center_id: uuid.UUID | None):
+    if not center_id:
+        return
+    site = await site_crud.get_site(db, center_id)
+    if not site or site.study_id != project_id or not site.is_active:
+        raise HTTPException(status_code=status.HTTP_404_NOT_FOUND, detail="中心已停用")
+
+
 @router.get(
     "/special",
     response_model=FeeApiResponse[list[SpecialExpenseListItem]],
@@ -122,7 +130,7 @@ async def get_special_expense(
     "/special",
     response_model=FeeApiResponse[SpecialExpenseRead],
     status_code=status.HTTP_201_CREATED,
-    dependencies=[Depends(get_current_user)],
+    dependencies=[Depends(get_current_user), Depends(require_study_not_locked())],
 )
 async def create_special_expense(
     expense_in: SpecialExpenseCreate,
@@ -134,8 +142,9 @@ async def create_special_expense(
     _validate_special_rules(expense_in)
     if expense_in.center_id:
         site = await site_crud.get_site(db, expense_in.center_id)
-        if not site or site.study_id != expense_in.project_id:
-            raise HTTPException(status_code=status.HTTP_400_BAD_REQUEST, detail="中心不存在或不属于该项目")
+        if not site or site.study_id != expense_in.project_id or not site.is_active:
+            raise HTTPException(status_code=status.HTTP_400_BAD_REQUEST, detail="中心不存在或已停用")
+    await _ensure_center_active(db, expense_in.project_id, expense_in.center_id)
     expense = await special_crud.create_special_expense(db, expense_in, created_by=current_user.id)
     await audit_crud.log_action(
         db,
@@ -153,7 +162,7 @@ async def create_special_expense(
 @router.patch(
     "/special/{expense_id}",
     response_model=FeeApiResponse[SpecialExpenseRead],
-    dependencies=[Depends(get_current_user)],
+    dependencies=[Depends(get_current_user), Depends(require_study_not_locked())],
 )
 async def update_special_expense(
     expense_id: uuid.UUID,
@@ -181,8 +190,11 @@ async def update_special_expense(
     _validate_special_rules(merged)
     if expense_in.center_id:
         site = await site_crud.get_site(db, expense_in.center_id)
-        if not site or site.study_id != expense.project_id:
-            raise HTTPException(status_code=status.HTTP_400_BAD_REQUEST, detail="中心不存在或不属于该项目")
+        if not site or site.study_id != expense.project_id or not site.is_active:
+            raise HTTPException(status_code=status.HTTP_400_BAD_REQUEST, detail="中心不存在或已停用")
+        await _ensure_center_active(db, expense.project_id, expense_in.center_id)
+    else:
+        await _ensure_center_active(db, expense.project_id, expense.center_id)
     expense = await special_crud.update_special_expense(db, expense, expense_in)
     await audit_crud.log_action(
         db,
@@ -200,7 +212,7 @@ async def update_special_expense(
 @router.delete(
     "/special/{expense_id}",
     status_code=status.HTTP_204_NO_CONTENT,
-    dependencies=[Depends(get_current_user)],
+    dependencies=[Depends(get_current_user), Depends(require_study_not_locked())],
 )
 async def delete_special_expense(
     expense_id: uuid.UUID,
@@ -211,6 +223,7 @@ async def delete_special_expense(
     if not expense:
         raise HTTPException(status_code=status.HTTP_404_NOT_FOUND, detail="特殊费用不存在")
     await _ensure_project_access(db, expense.project_id, current_user, write=True)
+    await _ensure_center_active(db, expense.project_id, expense.center_id)
     await special_crud.delete_special_expense(db, expense)
     await audit_crud.log_action(
         db,