更新

server/app/adminapi/http/middleware/AuthMiddleware.php

@@ -109,17 +109,24 @@ class AuthMiddleware
      */
     private function matchPermissionAlias(string $accessUri, array $adminUris): bool
     {
-        if (!in_array('tcm.diagnosis/dailyrecord', $adminUris, true)) {
-            return false;
+        if (in_array('tcm.diagnosis/dailyrecord', $adminUris, true)
+            && in_array($accessUri, [
+                'tcm.diagnosistodo/lists',
+                'tcm.diagnosistodo/add',
+                'tcm.diagnosistodo/cancel',
+                'tcm.diagnosis/trackingnotes',
+                'tcm.diagnosis/addtrackingnote',
+            ], true)) {
+            return true;
         }
 
-        return in_array($accessUri, [
-            'tcm.diagnosistodo/lists',
-            'tcm.diagnosistodo/add',
-            'tcm.diagnosistodo/cancel',
-            'tcm.diagnosis/trackingnotes',
-            'tcm.diagnosis/addtrackingnote',
-        ], true);
+        // 导出与列表共用 PrescriptionOrderLists 数据域；角色漏勾「导出订单」子权限时仍返回 权限不足
+        if ($accessUri === 'tcm.prescriptionorder/export'
+            && in_array('tcm.prescriptionorder/lists', $adminUris, true)) {
+            return true;
+        }
+
+        return false;
     }
 
     /**