优化

scripts/admin-test-env-modules/phase4-overseas-master-data.mjs

@@ -375,13 +375,19 @@ async function verifyCanonicalPermissionDenial(context, resource) {
   if (!roleId) throw new Error('无主数据权限角色未返回ID')
   resource.permissionProbe = { roleId, membershipId: null, roleStatus: 'ACTIVE', userStatus: null }
 
-  const phone = await context.findAvailablePhone(MODULE)
   const username = `p4_md_deny_${suffix}`.slice(0, 64).toLowerCase()
   const password = `P4md${suffix.slice(-8)}A1!`
-  const userResponse = await context.request('POST', '/api/platform/v1/iam/users', {
-    username, displayName: `四期主数据拒绝-${suffix}`, phone,
-    email: `${username}@example.com`, tenantId: '0', roleIds: [roleId], password, status: 'ACTIVE',
-  })
+  let userResponse
+  for (let attempt = 0; attempt < 3; attempt += 1) {
+    const phone = await context.findAvailablePhone(MODULE)
+    userResponse = await context.request('POST', '/api/platform/v1/iam/users', {
+      username, displayName: `四期主数据拒绝-${suffix}`, phone,
+      email: `${username}@example.com`, tenantId: '0', roleIds: [roleId], password, status: 'ACTIVE',
+    })
+    // 客户管理员候选检查不覆盖平台用户；仅明确未创建的手机号冲突允许换号。
+    if (!(userResponse.http === 200 && String(userResponse.body?.code) === 'A0409'
+      && userResponse.body?.message === '手机号已存在')) break
+  }
   const user = requireData(context, '创建无主数据权限用户', userResponse)
   const membershipId = asId(user?.membershipId)
   if (!membershipId) throw new Error('无主数据权限用户未返回membershipId')