feat: 删除平台客服角色，客服查询并入发货订单 Tab

backend/internal/middleware/auth.go

@@ -16,6 +16,7 @@ const (
 	CtxUsername            = "username"
 	CtxRole                = "role"
 	CtxMerchantRole        = "merchant_role"
+	CtxMerchantCode        = "merchant_code"
 	CtxMerchantPermissions = "merchant_permissions"
 )
 
@@ -88,27 +89,13 @@ func Tenant(tenantSvc *service.TenantService) gin.HandlerFunc {
 				return
 			}
 			c.Set(CtxMerchantID, merchant.ID)
+			c.Set(CtxMerchantCode, merchant.Code)
 			c.Set(CtxMerchantRole, model.MemberRoleOwner)
 			permissions, _ := tenantSvc.MerchantRolePermissions(merchant.ID, model.MemberRoleOwner)
 			c.Set(CtxMerchantPermissions, permissions)
 			c.Next()
 			return
 		}
-		if GetRole(c) == model.RolePlatformSupport {
-			// 平台客服只借用自营商户的订单上下文：可完整操作发货订单，
-			// 但不写入 merchant_members，也不会获得商品、钱包、成员等权限。
-			merchant, err := tenantSvc.ResolveMerchantForAdmin(model.MerchantCodeSelfOperated)
-			if err != nil {
-				response.Forbidden(c, err.Error())
-				c.Abort()
-				return
-			}
-			c.Set(CtxMerchantID, merchant.ID)
-			c.Set(CtxMerchantRole, model.MemberRoleSupport)
-			c.Set(CtxMerchantPermissions, map[string]struct{}{model.PermissionOrdersManage: {}})
-			c.Next()
-			return
-		}
 		member, err := tenantSvc.ResolveMember(GetUserID(c), merchantRef)
 		if err != nil {
 			response.Forbidden(c, err.Error())
@@ -116,6 +103,9 @@ func Tenant(tenantSvc *service.TenantService) gin.HandlerFunc {
 			return
 		}
 		c.Set(CtxMerchantID, member.MerchantID)
+		if member.Merchant != nil {
+			c.Set(CtxMerchantCode, member.Merchant.Code)
+		}
 		c.Set(CtxMerchantRole, member.Role)
 		permissions, err := tenantSvc.MerchantRolePermissions(member.MerchantID, member.Role)
 		if err != nil {
@@ -172,3 +162,25 @@ func GetMerchantRole(c *gin.Context) string {
 	role, _ := value.(string)
 	return role
 }
+
+func GetMerchantCode(c *gin.Context) string {
+	value, _ := c.Get(CtxMerchantCode)
+	code, _ := value.(string)
+	return code
+}
+
+// RequireSelfOrderSiteOrAdmin 允许平台管理员，或「自用自动发货」商户的成员访问客服查询。
+func RequireSelfOrderSiteOrAdmin() gin.HandlerFunc {
+	return func(c *gin.Context) {
+		if GetRole(c) == model.RoleAdmin {
+			c.Next()
+			return
+		}
+		if GetMerchantCode(c) == model.MerchantCodeSelfOrderSite {
+			c.Next()
+			return
+		}
+		response.Forbidden(c, "权限不足")
+		c.Abort()
+	}
+}