geng

server/app/adminapi/logic/tcm/PrescriptionLogic.php

@@ -2,9 +2,10 @@
 
 declare(strict_types=1);
 
-namespace app\adminapi\logic\tcm;
-
-use app\common\model\auth\Admin;
+namespace app\adminapi\logic\tcm;
+
+use app\adminapi\logic\firstvisit\MyPatientLogic;
+use app\common\model\auth\Admin;
 use app\common\model\doctor\Appointment;
 use app\common\model\doctor\Medicine as DoctorMedicine;
 use app\common\model\tcm\Prescription;
@@ -934,14 +935,35 @@ class PrescriptionLogic
     /**
      * 根据诊单ID获取处方列表
      */
-    public static function listByDiagnosis(int $diagnosisId): array
-    {
-        return Prescription::where('diagnosis_id', $diagnosisId)
-            ->whereNull('delete_time')
-            ->order('id', 'desc')
-            ->select()
-            ->toArray();
-    }
+    public static function listByDiagnosis(int $diagnosisId, int $viewerAdminId, array $viewerAdminInfo): array
+    {
+        self::$error = '';
+        if (!MyPatientLogic::canAccessDiagnosis($diagnosisId, $viewerAdminId, $viewerAdminInfo)) {
+            self::setError('诊单不存在或无权访问');
+
+            return [];
+        }
+
+        $rows = Prescription::where('diagnosis_id', $diagnosisId)
+            ->whereNull('delete_time')
+            ->order('id', 'desc')
+            ->select()
+            ->toArray();
+
+        return self::filterViewablePrescriptions($rows, $viewerAdminId, $viewerAdminInfo);
+    }
+
+    /**
+     * @param array<int, array<string,mixed>> $rows
+     * @return array<int, array<string,mixed>>
+     */
+    private static function filterViewablePrescriptions(array $rows, int $viewerAdminId, array $viewerAdminInfo): array
+    {
+        return array_values(array_filter(
+            $rows,
+            static fn (array $row): bool => self::canViewPrescription($row, $viewerAdminId, $viewerAdminInfo)
+        ));
+    }
 
     /**
      * 根据预约ID获取处方（带权限检查）