优化

财务管理/openapi/finance-f1-manual-v1.yaml

@@ -275,6 +275,7 @@ paths:
       x-permission-any-of:
         - platform:finance:receipt:create
         - platform:finance:cost:create
+        - platform:finance:fee-source:edit
       security:
         - platformFinance: []
       parameters:
@@ -288,6 +289,62 @@ paths:
       responses:
         '200':
           $ref: '#/components/responses/VoucherUploadResponse'
+  /platform/finance/v1/vouchers/{fileId}:
+    get:
+      summary: 读取付款凭证名称及类型
+      description: 按 customerId 校验 File 的客户、FINANCE_VOUCHER 类型和业务归属；下载响应禁止缓存并使用 attachment。
+      x-permission: platform:finance:customer-arap:list
+      security:
+        - platformFinance: []
+      parameters:
+        - $ref: '#/components/parameters/RequiredCustomerId'
+        - name: fileId
+          in: path
+          required: true
+          schema: {type: string, pattern: '^[1-9][0-9]*$'}
+      responses:
+        '200':
+          description: 成功
+          content:
+            application/json:
+              schema:
+                type: object
+                properties:
+                  data:
+                    type: object
+                    required: [fileId, fileName, contentType, sizeBytes]
+                    properties:
+                      fileId: {type: string}
+                      fileName: {type: string}
+                      contentType: {type: string}
+                      sizeBytes: {type: integer, format: int64}
+        '400':
+          $ref: '#/components/responses/BusinessError'
+        '403':
+          $ref: '#/components/responses/BusinessError'
+  /platform/finance/v1/vouchers/{fileId}/content:
+    get:
+      summary: 下载付款凭证
+      description: 按 customerId 校验 File 的客户、FINANCE_VOUCHER 类型和业务归属；下载响应禁止缓存并使用 attachment。
+      x-permission: platform:finance:customer-arap:list
+      security:
+        - platformFinance: []
+      parameters:
+        - $ref: '#/components/parameters/RequiredCustomerId'
+        - name: fileId
+          in: path
+          required: true
+          schema: {type: string, pattern: '^[1-9][0-9]*$'}
+      responses:
+        '200':
+          description: 成功
+          content:
+            application/octet-stream:
+              schema: {type: string, format: binary}
+        '400':
+          $ref: '#/components/responses/BusinessError'
+        '403':
+          $ref: '#/components/responses/BusinessError'
   /client/finance/v1/bills:
     get:
       summary: 客户只读查询可见账单