fix(tianpan): recalibrate接口补充权限检查

cfc-backend/src/main/java/com/etotem/cfc/controller/tianpan/TianpanController.java

@@ -230,6 +230,16 @@ public class TianpanController {
         String memberType = params.get("memberType") != null ? params.get("memberType").toString() : "child";
         String operator = params.get("operator") != null ? params.get("operator").toString() : "system";
 
+        String role = (String) request.getAttribute("role");
+        Long currentUserId = ((Number) request.getAttribute("userId")).longValue();
+        Long familyId = getMemberFamilyId(memberId);
+        if (familyId == null) {
+            return Result.error(404, "成员不存在");
+        }
+        if (!checkAccess(role, familyId, currentUserId, request)) {
+            return Result.error(403, "无权访问该成员数据");
+        }
+
         FamilyMemberAttributes attrs = familyMemberAttributeService.getByMember(memberId, memberType);
         if (attrs == null) {
             return Result.error("成员属性不存在");