补齐业务路由与页面权限控制

backend/app/api/v1/study_subject_pds.py

@@ -3,7 +3,7 @@ import uuid
 from fastapi import APIRouter, Depends, HTTPException, status
 from sqlalchemy.ext.asyncio import AsyncSession
 
-from app.core.deps import get_cra_site_scope, get_current_user, get_db_session, require_study_member
+from app.core.deps import get_cra_site_scope, get_current_user, get_db_session, require_api_permission
 from app.crud import study as study_crud
 from app.crud import subject_pd as subject_pd_crud
 from app.schemas.subject_pd import SubjectPdSummaryRead
@@ -21,7 +21,7 @@ async def _ensure_study_exists(db: AsyncSession, study_id: uuid.UUID):
 @router.get(
     "/subject-pds",
     response_model=list[SubjectPdSummaryRead],
-    dependencies=[Depends(require_study_member())],
+    dependencies=[Depends(require_api_permission("subject_pds:list"))],
 )
 async def list_study_subject_pds(
     study_id: uuid.UUID,