feat(followup-audio): add independent assignable recording permission

2026-10-12 15:14:19 +08:00
parent 86041042b9
commit 8f7544c1ad
10 changed files with 299 additions and 18 deletions
@@ -86,7 +86,8 @@ class AuthMiddleware
                'create', 'lists', 'detail', 'savedraft', 'apply', 'retry', 'audio', 'delete', 'reextract'];
            $action = substr($accessUri, strlen('tcm.followupaudio/'));
            $uris = $this->formatUrl($adminAuthCache->getAdminUri() ?? []);
-            if (in_array($action, $allowed, true) && in_array('tcm.diagnosis/edit', $uris, true)) {
+            if (in_array($action, $allowed, true) && in_array('tcm.diagnosis/edit', $uris, true)
+                && in_array('tcm.diagnosis/followupaudio', $uris, true)) {
                return $next($request); // The service also checks the current patient scope and daily permissions.
            }
            return JsonService::fail('权限不足，无法访问或操作');