管理后台前后端逻辑、UI美化

backend/app/api/v1/startup.py

@@ -3,8 +3,9 @@ import uuid
 from fastapi import APIRouter, Depends, HTTPException, status
 from sqlalchemy.ext.asyncio import AsyncSession
 
-from app.core.deps import get_current_user, get_db_session, require_study_member, require_study_roles
+from app.core.deps import get_current_user, get_db_session, require_study_member, require_study_roles, require_study_not_locked
 from app.crud import audit as audit_crud
+from app.crud import site as site_crud
 from app.crud import startup as startup_crud
 from app.crud import study as study_crud
 from app.schemas.startup import (
@@ -32,6 +33,22 @@ async def _ensure_study_exists(db: AsyncSession, study_id: uuid.UUID):
     return study
 
 
+async def _ensure_site_name_active(db: AsyncSession, study_id: uuid.UUID, site_name: str | None):
+    if not site_name:
+        return
+    active_names = await site_crud.list_active_names(db, study_id)
+    if site_name not in active_names:
+        raise HTTPException(status_code=status.HTTP_404_NOT_FOUND, detail="中心已停用")
+
+
+async def _ensure_site_active(db: AsyncSession, site_id: uuid.UUID | None):
+    if not site_id:
+        return
+    site = await site_crud.get_site(db, site_id)
+    if not site or not site.is_active:
+        raise HTTPException(status_code=status.HTTP_403_FORBIDDEN, detail="中心已停用")
+
+
 @router.post(
     "/feasibility",
     response_model=StartupFeasibilityRead,
@@ -45,6 +62,7 @@ async def create_feasibility(
     current_user=Depends(get_current_user),
 ) -> StartupFeasibilityRead:
     await _ensure_study_exists(db, study_id)
+    await _ensure_site_active(db, record_in.site_id)
     record = await startup_crud.create_feasibility(db, study_id, record_in, created_by=current_user.id)
     await audit_crud.log_action(
         db,
@@ -108,6 +126,7 @@ async def update_feasibility(
     record = await startup_crud.get_feasibility(db, record_id)
     if not record or record.study_id != study_id:
         raise HTTPException(status_code=status.HTTP_404_NOT_FOUND, detail="立项记录不存在")
+    await _ensure_site_active(db, record.site_id)
     record = await startup_crud.update_feasibility(db, record, record_in)
     await audit_crud.log_action(
         db,
@@ -137,6 +156,7 @@ async def delete_feasibility(
     record = await startup_crud.get_feasibility(db, record_id)
     if not record or record.study_id != study_id:
         raise HTTPException(status_code=status.HTTP_404_NOT_FOUND, detail="立项记录不存在")
+    await _ensure_site_active(db, record.site_id)
     await startup_crud.delete_feasibility(db, record)
     await audit_crud.log_action(
         db,
@@ -163,6 +183,7 @@ async def create_ethics(
     current_user=Depends(get_current_user),
 ) -> StartupEthicsRead:
     await _ensure_study_exists(db, study_id)
+    await _ensure_site_active(db, record_in.site_id)
     record = await startup_crud.create_ethics(db, study_id, record_in, created_by=current_user.id)
     await audit_crud.log_action(
         db,
@@ -226,6 +247,7 @@ async def update_ethics(
     record = await startup_crud.get_ethics(db, record_id)
     if not record or record.study_id != study_id:
         raise HTTPException(status_code=status.HTTP_404_NOT_FOUND, detail="伦理记录不存在")
+    await _ensure_site_active(db, record.site_id)
     record = await startup_crud.update_ethics(db, record, record_in)
     await audit_crud.log_action(
         db,
@@ -255,6 +277,7 @@ async def delete_ethics(
     record = await startup_crud.get_ethics(db, record_id)
     if not record or record.study_id != study_id:
         raise HTTPException(status_code=status.HTTP_404_NOT_FOUND, detail="伦理记录不存在")
+    await _ensure_site_active(db, record.site_id)
     await startup_crud.delete_ethics(db, record)
     await audit_crud.log_action(
         db,
@@ -281,6 +304,7 @@ async def create_kickoff(
     current_user=Depends(get_current_user),
 ) -> KickoffMeetingRead:
     await _ensure_study_exists(db, study_id)
+    await _ensure_site_active(db, meeting_in.site_id)
     meeting = await startup_crud.create_kickoff(db, study_id, meeting_in, created_by=current_user.id)
     await audit_crud.log_action(
         db,
@@ -344,6 +368,7 @@ async def update_kickoff(
     meeting = await startup_crud.get_kickoff(db, meeting_id)
     if not meeting or meeting.study_id != study_id:
         raise HTTPException(status_code=status.HTTP_404_NOT_FOUND, detail="启动会记录不存在")
+    await _ensure_site_active(db, meeting.site_id)
     meeting = await startup_crud.update_kickoff(db, meeting, meeting_in)
     await audit_crud.log_action(
         db,
@@ -371,6 +396,7 @@ async def create_training_authorization(
     current_user=Depends(get_current_user),
 ) -> TrainingAuthorizationRead:
     await _ensure_study_exists(db, study_id)
+    await _ensure_site_name_active(db, study_id, record_in.site_name)
     record = await startup_crud.create_training_authorization(db, study_id, record_in, created_by=current_user.id)
     await audit_crud.log_action(
         db,
@@ -434,6 +460,7 @@ async def update_training_authorization(
     record = await startup_crud.get_training_authorization(db, record_id)
     if not record or record.study_id != study_id:
         raise HTTPException(status_code=status.HTTP_404_NOT_FOUND, detail="培训授权人员不存在")
+    await _ensure_site_name_active(db, study_id, record.site_name)
     record = await startup_crud.update_training_authorization(db, record, record_in)
     await audit_crud.log_action(
         db,
@@ -463,6 +490,7 @@ async def delete_training_authorization(
     record = await startup_crud.get_training_authorization(db, record_id)
     if not record or record.study_id != study_id:
         raise HTTPException(status_code=status.HTTP_404_NOT_FOUND, detail="培训授权人员不存在")
+    await _ensure_site_name_active(db, study_id, record.site_name)
     await startup_crud.delete_training_authorization(db, record)
     await audit_crud.log_action(
         db,