feat(监控): 完善系统监控、登录状态与访问审计能力

backend/tests/test_admin_pm_permissions.py

@@ -246,7 +246,7 @@ async def test_project_member_can_read_own_effective_permissions(db_session: Asy
 
 
 @pytest.mark.asyncio
-async def test_project_pm_monitoring_scope_is_limited_to_own_projects(db_session: AsyncSession):
+async def test_project_pm_cannot_access_system_monitoring(db_session: AsyncSession):
     pm_id = uuid.uuid4()
     own_study_id = uuid.uuid4()
     other_study_id = uuid.uuid4()
@@ -256,12 +256,10 @@ async def test_project_pm_monitoring_scope_is_limited_to_own_projects(db_session
     await _seed_member(db_session, own_study_id, pm_id, "PM")
     await db_session.commit()
 
-    scope = await resolve_monitoring_scope(db_session, UserStub(id=pm_id))
+    with pytest.raises(HTTPException) as exc_info:
+        await resolve_monitoring_scope(db_session, UserStub(id=pm_id))
 
-    assert scope.is_admin is False
-    assert scope.study_ids == {own_study_id}
-    assert scope.can_access_study(own_study_id)
-    assert not scope.can_access_study(other_study_id)
+    assert exc_info.value.status_code == 403
 
 
 @pytest.mark.asyncio