ZYT/zyt
2
0
Fork 0
Code Issues Actions Packages Projects Releases Wiki Activity

chore: record session journal - 握力环训练趣味化

Browse Source
This commit is contained in:
long
2026-05-27 16:53:33 +08:00
parent 261f8315de
commit b9d2541b32
946 changed files with 107438 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
.trellis/tasks/archive/2026-05/05-07-diagnosis-business-order-no-data-scope/research/prescription-order-permission-scope.md
+15
View File
@@ -0,0 +1,15 @@
# Findings
- Diagnosis edit dialog business-order tab uses `prescriptionOrderLists` from `admin/src/api/tcm.ts`.
- The request is rendered by `admin/src/views/tcm/diagnosis/components/PatientOrderList.vue`.
- Backend controller `server/app/adminapi/controller/tcm/PrescriptionOrderController.php` forwards to `PrescriptionOrderLists`.
- Visibility restrictions are applied in `server/app/adminapi/lists/tcm/PrescriptionOrderLists.php` by:
- `applyCreatorOrOwnPrescriptionVisibility()`
- `applyDataScopeForPrescriptionOrder()`
- Patient scoping is already constrained through:
- `applyPatientIdFilter()`
- built-in `diagnosis_id` equality search
# Recommended change
Introduce an explicit scene flag for diagnosis-edit patient-order queries and bypass only the list visibility filters in that scene, while keeping patient/diagnosis filters intact.