feat: complete overseas customer and PDA workflows

lastleg-service/src/main/java/com/baiyue/lastleg/procurement/controller/MerchantOverseasProcurementController.java

@@ -6,9 +6,11 @@ import com.baiyue.common.security.AuthenticatedUser;
 import com.baiyue.lastleg.procurement.dto.OverseasProcurementRequests;
 import com.baiyue.lastleg.procurement.dto.OverseasProcurementResponses;
 import com.baiyue.lastleg.procurement.service.OverseasProcurementService;
+import com.baiyue.lastleg.security.OverseasPermissions;
 import jakarta.annotation.Resource;
 import jakarta.validation.Valid;
 import org.springframework.http.HttpStatus;
+import org.springframework.security.access.prepost.PreAuthorize;
 import org.springframework.security.core.annotation.AuthenticationPrincipal;
 import org.springframework.web.bind.annotation.GetMapping;
 import org.springframework.web.bind.annotation.PathVariable;
@@ -20,6 +22,7 @@ import org.springframework.web.server.ResponseStatusException;
 
 @RestController
 @RequestMapping("/api/merchant/v1/last-leg/overseas-procurements")
+@PreAuthorize("hasAuthority('" + OverseasPermissions.MERCHANT_PROCUREMENT + "')")
 public class MerchantOverseasProcurementController {
     @Resource private OverseasProcurementService service;
 
@@ -32,8 +35,8 @@ public class MerchantOverseasProcurementController {
 
     @GetMapping
     public ApiResponse<PageResult<OverseasProcurementResponses.Summary>> page(
-        @AuthenticationPrincipal AuthenticatedUser user, @Valid OverseasProcurementRequests.Query query) {
-        return ApiResponse.success(service.page(customer(user), query));
+        @AuthenticationPrincipal AuthenticatedUser user, @Valid OverseasProcurementRequests.MerchantQuery query) {
+        return ApiResponse.success(service.page(customer(user), query.scoped()));
     }
 
     @GetMapping("/{orderNo}")

lastleg-service/src/main/java/com/baiyue/lastleg/procurement/dto/OverseasProcurementRequests.java

@@ -36,6 +36,17 @@ public final class OverseasProcurementRequests {
         String productName, String status, String purchaseWarehouseId,
         LocalDateTime createdFrom, LocalDateTime createdTo) {}
 
+    public record MerchantQuery(
+        @Min(1) long page, @Min(1) @Max(200) long size,
+        String orderNo, String purchaseCategory, String productName,
+        String status, String purchaseWarehouseId,
+        LocalDateTime createdFrom, LocalDateTime createdTo) {
+        public Query scoped() {
+            return new Query(page, size, orderNo, null, purchaseCategory, productName,
+                status, purchaseWarehouseId, createdFrom, createdTo);
+        }
+    }
+
     public record Review(
         @NotNull @Min(0) Long version,
         @NotBlank String decision,