Skip to content

P
pac

fix(plan): 详情按 ID 直取补 clinic 隔离,修切诊所后越权看别诊所患者 

召回池列表按 orgScope(clinicIds)过滤诊所,但 detail / aggregate(/plans/:id/full)按 ID 直取只
校验 host/tenant/sourceUnit,漏了 clinicIds → 切诊所后残留的旧 planId 仍能拉到别诊所患者详情。
现补齐:无 PLAN_VIEW_ALL 时目标诊所须在 clinicIds 内(null 集团池放行),否则 aggregate 抛
PLAN_NOT_FOUND(前端已有该码处理 → 自动跳回当前 scope 首个患者),detail/recompute 抛 404。

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
0 jobs from main
c4bb0a94 c4bb0a94b94558c8e05fd7880f8bf3448f36d2ea

Found errors in your .gitlab-ci.yml:

  • jobs:openapi-drift config contains unknown keys: rules
You can also test your .gitlab-ci.yml in the Lint
Status Job ID Name Coverage