管理后台前后端逻辑、UI美化

backend/app/api/v1/knowledge_notes.py

@@ -3,9 +3,10 @@ import uuid
 from fastapi import APIRouter, Depends, HTTPException, status
 from sqlalchemy.ext.asyncio import AsyncSession
 
-from app.core.deps import get_current_user, get_db_session, require_study_member, require_study_roles
+from app.core.deps import get_current_user, get_db_session, require_study_member, require_study_roles, require_study_not_locked
 from app.crud import audit as audit_crud
 from app.crud import knowledge_note as note_crud
+from app.crud import site as site_crud
 from app.crud import study as study_crud
 from app.schemas.knowledge_note import KnowledgeNoteCreate, KnowledgeNoteRead, KnowledgeNoteUpdate
 
@@ -19,6 +20,14 @@ async def _ensure_study_exists(db: AsyncSession, study_id: uuid.UUID):
     return study
 
 
+async def _ensure_site_name_active(db: AsyncSession, study_id: uuid.UUID, site_name: str | None):
+    if not site_name:
+        return
+    active_names = await site_crud.list_active_names(db, study_id)
+    if site_name not in active_names:
+        raise HTTPException(status_code=status.HTTP_404_NOT_FOUND, detail="中心已停用")
+
+
 @router.post(
     "/notes",
     response_model=KnowledgeNoteRead,
@@ -32,6 +41,7 @@ async def create_note(
     current_user=Depends(get_current_user),
 ) -> KnowledgeNoteRead:
     await _ensure_study_exists(db, study_id)
+    await _ensure_site_name_active(db, study_id, note_in.site_name)
     note = await note_crud.create_note(db, study_id, note_in, created_by=current_user.id)
     await audit_crud.log_action(
         db,
@@ -97,6 +107,7 @@ async def update_note(
     note = await note_crud.get_note(db, note_id)
     if not note or note.study_id != study_id:
         raise HTTPException(status_code=status.HTTP_404_NOT_FOUND, detail="注意事项不存在")
+    await _ensure_site_name_active(db, study_id, note.site_name)
     note = await note_crud.update_note(db, note, note_in)
     await audit_crud.log_action(
         db,
@@ -126,6 +137,7 @@ async def delete_note(
     note = await note_crud.get_note(db, note_id)
     if not note or note.study_id != study_id:
         raise HTTPException(status_code=status.HTTP_404_NOT_FOUND, detail="注意事项不存在")
+    await _ensure_site_name_active(db, study_id, note.site_name)
     await note_crud.delete_note(db, note)
     await audit_crud.log_action(
         db,