Merge branch 'master' of https://gitee.com/v_cms/zyt

你好

server/app/adminapi/http/middleware/AuthMiddleware.php

@@ -109,17 +109,30 @@ class AuthMiddleware
      */
     private function matchPermissionAlias(string $accessUri, array $adminUris): bool
     {
-        if (!in_array('tcm.diagnosis/dailyrecord', $adminUris, true)) {
-            return false;
+        if (in_array('tcm.diagnosis/dailyrecord', $adminUris, true)
+            && in_array($accessUri, [
+                'tcm.diagnosistodo/lists',
+                'tcm.diagnosistodo/add',
+                'tcm.diagnosistodo/cancel',
+                'tcm.diagnosis/trackingnotes',
+                'tcm.diagnosis/addtrackingnote',
+            ], true)) {
+            return true;
         }
 
-        return in_array($accessUri, [
-            'tcm.diagnosistodo/lists',
-            'tcm.diagnosistodo/add',
-            'tcm.diagnosistodo/cancel',
-            'tcm.diagnosis/trackingnotes',
-            'tcm.diagnosis/addtrackingnote',
-        ], true);
+        // 导出与列表共用 PrescriptionOrderLists 数据域；角色漏勾「导出订单」子权限时仍返回 权限不足
+        if ($accessUri === 'tcm.prescriptionorder/export'
+            && in_array('tcm.prescriptionorder/lists', $adminUris, true)) {
+            return true;
+        }
+
+        // 挂号列表批量改渠道：与单条编辑同一数据域，复用 doctor.appointment/edit
+        if ($accessUri === 'doctor.appointment/batcheditchannel'
+            && in_array('doctor.appointment/edit', $adminUris, true)) {
+            return true;
+        }
+
+        return false;
     }
 
     /**