fix(file): require Firstleg for PDA evidence access

file/src/main/java/com/baiyue/file/controller/PlatformLoadingEvidenceController.java

@@ -21,7 +21,7 @@ public class PlatformLoadingEvidenceController {
     @Resource private LoadingEvidenceService service;
 
     @PostMapping(value = "/{containerBookingId}", consumes = MediaType.MULTIPART_FORM_DATA_VALUE)
-    @PreAuthorize("hasAnyAuthority('platform:firstleg:inbound:loading:edit','platform:firstleg:pda:work')")
+    @PreAuthorize("hasAuthority('platform:firstleg:inbound:loading:edit')")
     public ApiResponse<LoadingEvidenceService.UploadResult> upload(
         @AuthenticationPrincipal AuthenticatedUser user, @PathVariable long containerBookingId,
         @RequestParam String evidenceType, @RequestPart("file") MultipartFile file) {
@@ -30,7 +30,7 @@ public class PlatformLoadingEvidenceController {
     }
 
     @GetMapping("/{containerBookingId}/{fileId}")
-    @PreAuthorize("hasAnyAuthority('platform:firstleg:inbound:loading:view','platform:firstleg:pda:work')")
+    @PreAuthorize("hasAuthority('platform:firstleg:inbound:loading:view')")
     public ResponseEntity<byte[]> download(@AuthenticationPrincipal AuthenticatedUser user,
         @PathVariable long containerBookingId, @PathVariable long fileId) {
         requirePlatform(user); requirePositive(containerBookingId, fileId);

file/src/main/resources/openapi/loading-evidence-v1.yaml

@@ -13,11 +13,11 @@ paths:
   /api/platform/v1/files/loading-evidence/{containerBookingId}:
     post:
       tags: [LoadingEvidence]
-      summary: 平台或PDA上传柜级装柜证据
-      description: 不接受客户ID或入仓单ID；同一文件不得跨containerBookingId复用。
-      x-required-any-permission:
-        - platform:firstleg:inbound:loading:edit
-        - platform:firstleg:pda:work
+      summary: Admin上传柜级装柜证据
+      description: >-
+        仅Admin装柜证据维护权限可直连；国内PDA禁止直连File，必须先调用Firstleg任务证据接口。
+        不接受客户ID或入仓单ID；同一文件不得跨containerBookingId复用。
+      x-required-permission: platform:firstleg:inbound:loading:edit
       parameters:
         - $ref: '#/components/parameters/ContainerBookingId'
         - $ref: '#/components/parameters/EvidenceType'
@@ -39,11 +39,11 @@ paths:
   /api/platform/v1/files/loading-evidence/{containerBookingId}/{fileId}:
     get:
       tags: [LoadingEvidence]
-      summary: 平台或PDA下载柜级装柜证据
-      description: 必须同时命中平台所有权、containerBookingId、fileId、LOADING_*类型和ACTIVE状态；响应禁止缓存。
-      x-required-any-permission:
-        - platform:firstleg:inbound:loading:view
-        - platform:firstleg:pda:work
+      summary: Admin下载柜级装柜证据
+      description: >-
+        仅Admin装柜证据读取权限可直连；国内PDA必须经Firstleg任务、仓库和操作者校验后，由Firstleg使用内部服务令牌下载。
+        文件必须同时命中平台所有权、containerBookingId、fileId、五类LOADING业务类型和ACTIVE状态；响应禁止缓存。
+      x-required-permission: platform:firstleg:inbound:loading:view
       parameters:
         - $ref: '#/components/parameters/ContainerBookingId'
         - $ref: '#/components/parameters/FileId'