x

src/api/inventory/purchase_order_routes.py

@@ -8,7 +8,7 @@
 
 路由前缀: /api/purchase-orders
 """
-from fastapi import APIRouter, Depends, Query
+from fastapi import APIRouter, Depends, Query, HTTPException
 from sqlalchemy.ext.asyncio import AsyncSession
 from sqlalchemy import select
 from typing import Optional, List
@@ -79,6 +79,14 @@ async def create_purchase_order(
     
     total_amount = 0
     for item_data in order_data.items:
+        product_result = await db_session.execute(
+            select(Product).where(Product.id == item_data.product_id, Product.is_active == True)
+        )
+        product = product_result.scalar_one_or_none()
+        if not product:
+            raise HTTPException(status_code=400, detail=f"物料不存在: {item_data.product_id}")
+        if product.item_type != "material":
+            raise HTTPException(status_code=400, detail=f"采购单仅允许物料: {product.name}")
         item = PurchaseOrderItem(
             order_id=order.id,
             product_id=item_data.product_id,