管理后台前后端逻辑、UI美化

backend/app/api/v1/subject_histories.py

@@ -3,8 +3,10 @@ import uuid
 from fastapi import APIRouter, Depends, HTTPException, status
 from sqlalchemy.ext.asyncio import AsyncSession
 
-from app.core.deps import get_current_user, get_db_session, require_study_member, require_study_roles
+from app.core.deps import get_current_user, get_db_session, require_study_member, require_study_roles, require_study_not_locked
 from app.crud import audit as audit_crud
+from app.crud import site as site_crud
+from app.crud import subject as subject_crud
 from app.crud import subject_history as history_crud
 from app.crud import study as study_crud
 from app.schemas.subject_history import SubjectHistoryCreate, SubjectHistoryRead, SubjectHistoryUpdate
@@ -19,6 +21,14 @@ async def _ensure_study_exists(db: AsyncSession, study_id: uuid.UUID):
     return study
 
 
+async def _ensure_subject_active(db: AsyncSession, subject) -> None:
+    if not subject or not subject.site_id:
+        return
+    site = await site_crud.get_site(db, subject.site_id)
+    if not site or not site.is_active:
+        raise HTTPException(status_code=status.HTTP_403_FORBIDDEN, detail="中心已停用")
+
+
 @router.post(
     "/histories",
     response_model=SubjectHistoryRead,
@@ -33,6 +43,10 @@ async def create_history(
     current_user=Depends(get_current_user),
 ) -> SubjectHistoryRead:
     await _ensure_study_exists(db, study_id)
+    subject = await subject_crud.get_subject(db, subject_id)
+    if not subject or subject.study_id != study_id:
+        raise HTTPException(status_code=status.HTTP_404_NOT_FOUND, detail="参与者不存在")
+    await _ensure_subject_active(db, subject)
     if history_in.subject_id != subject_id:
         raise HTTPException(status_code=status.HTTP_400_BAD_REQUEST, detail="参与者不匹配")
     history = await history_crud.create_history(db, study_id, history_in, created_by=current_user.id)
@@ -62,6 +76,9 @@ async def list_histories(
     db: AsyncSession = Depends(get_db_session),
 ) -> list[SubjectHistoryRead]:
     await _ensure_study_exists(db, study_id)
+    subject = await subject_crud.get_subject(db, subject_id)
+    if not subject or subject.study_id != study_id:
+        raise HTTPException(status_code=status.HTTP_404_NOT_FOUND, detail="参与者不存在")
     items = await history_crud.list_histories(db, study_id, subject_id, skip=skip, limit=limit)
     return [SubjectHistoryRead.model_validate(item) for item in items]
 
@@ -78,6 +95,9 @@ async def get_history(
     db: AsyncSession = Depends(get_db_session),
 ) -> SubjectHistoryRead:
     await _ensure_study_exists(db, study_id)
+    subject = await subject_crud.get_subject(db, subject_id)
+    if not subject or subject.study_id != study_id:
+        raise HTTPException(status_code=status.HTTP_404_NOT_FOUND, detail="参与者不存在")
     history = await history_crud.get_history(db, history_id)
     if not history or history.study_id != study_id or history.subject_id != subject_id:
         raise HTTPException(status_code=status.HTTP_404_NOT_FOUND, detail="病史记录不存在")
@@ -98,6 +118,9 @@ async def update_history(
     current_user=Depends(get_current_user),
 ) -> SubjectHistoryRead:
     await _ensure_study_exists(db, study_id)
+    subject = await subject_crud.get_subject(db, subject_id)
+    if not subject or subject.study_id != study_id:
+        raise HTTPException(status_code=status.HTTP_404_NOT_FOUND, detail="参与者不存在")
     history = await history_crud.get_history(db, history_id)
     if not history or history.study_id != study_id or history.subject_id != subject_id:
         raise HTTPException(status_code=status.HTTP_404_NOT_FOUND, detail="病史记录不存在")
@@ -128,6 +151,9 @@ async def delete_history(
     current_user=Depends(get_current_user),
 ) -> None:
     await _ensure_study_exists(db, study_id)
+    subject = await subject_crud.get_subject(db, subject_id)
+    if not subject or subject.study_id != study_id:
+        raise HTTPException(status_code=status.HTTP_404_NOT_FOUND, detail="参与者不存在")
     history = await history_crud.get_history(db, history_id)
     if not history or history.study_id != study_id or history.subject_id != subject_id:
         raise HTTPException(status_code=status.HTTP_404_NOT_FOUND, detail="病史记录不存在")