更改权限

IRaCIS.Core.Application/Service/Visit/SubjectVisitService.cs

@@ -8,6 +8,7 @@ using IRaCIS.Core.Domain.Share;
 using IRaCIS.Core.Application.Contracts;
 using IRaCIS.Core.Application.Interfaces;
 using IRaCIS.Core.Infrastructure;
+using IRaCIS.Core.Application.Auth;
 
 namespace IRaCIS.Core.Application.Services
 {
@@ -120,8 +121,10 @@ namespace IRaCIS.Core.Application.Services
         }
 
 
+
         [HttpDelete, Route("{trialId:guid}/{id:guid}")]
         [TypeFilter(typeof(TrialResourceFilter))]
+        [Authorize(Policy = IRaCISPolicy.CRC)]
         public async Task<IResponseOutput> DeleteSV(Guid id)
         {
             if (await _repository.AnyAsync<DicomStudy>(t => t.SubjectVisitId == id))

IRaCIS.Core.Application/Service/Visit/VisitPlanService.cs

@@ -9,7 +9,8 @@ using Magicodes.ExporterAndImporter.Core;
 using Magicodes.ExporterAndImporter.Excel;
 using Magicodes.ExporterAndImporter.Excel.AspNetCore;
 using IRaCIS.Core.Infrastructure;
-using MassTransit;
+using Microsoft.AspNetCore.Authorization;
+using IRaCIS.Core.Application.Auth;
 
 namespace IRaCIS.Application.Services
 {
@@ -82,6 +83,7 @@ namespace IRaCIS.Application.Services
         /// <summary> 添加或更新访视计划某项</summary>
         [UnitOfWork]
         [HttpPost]
+        [Authorize(Policy = IRaCISPolicy.PMAndAPM)]
         public async Task<IResponseOutput> AddOrUpdateVisitStage(VisitPlanCommand visitPlan)
         {
 
@@ -212,7 +214,7 @@ namespace IRaCIS.Application.Services
 
         [UnitOfWork]
         [HttpPost("{trialId:guid}")]
-
+        [Authorize(Policy = IRaCISPolicy.PMAndAPM)]
         public async Task<IResponseOutput> ConfirmTrialVisitPlan(Guid trialId)
         {
             if (!await _trialRepository.AnyAsync(t => t.Id == trialId && (t.TrialStatusStr == StaticData.TrialInitializing || t.TrialStatusStr == StaticData.TrialOngoing)))