① 一句话需求

在 Backoffice ▸ LogManagement ▸ Frozen/UnFroze Log 增加手机号栏：默认脱敏；有 查看手机号 权限的管理员可从表头查看整批明文；查看须先留痕，导出内容跟随表头状态。

② 术语写死表

③ 全局红线表

④ 适用范围与「不做」边界

本次只增加手机号栏、整批明码切换、明码权限及必要留痕，并修正一条冻结状态中文。不开手机号搜索、不做逐笔展开、不改其他页面或既有字段。阅读者为后台前端、日志后端、权限后端、资安与测试。

2.1 位置与命名

2.1.1　在 用户名 后新增第 3 栏 手机号（英文栏名 Phone Number），原栏位依序后移，列表共 13 栏。画面表头只显示中文，Line 沿用英文；手机号与用户名优先并排。

2.2 资料来源与空值

2.2.1　读取会员当前手机号，与 操作人 无关；改号后显示新号码。没有手机号时留空，不显示占位，也不影响整批开关。

2.3 脱敏格式

2.3.1　本平台手机号固定 11 位。脱敏规则固定为前 3 位＋5 个 *＋后 3 位：

2.4 既有筛选与文案修正

2.4.1　搜索区维持 8 项：用户名、操作人、备注、日期、用户渠道、操作、冻结状态、Line。

2.4.2　冻结状态 第 4 项逐字改为 可登录和投注，不可充值和提款。只改中文，不改 Freeze Type、判断逻辑或既有资料。

3.1 表头开关

3.1.1　开关是表头右侧的蓝色底线连结 #0000FF，不另占栏。作用于最近一次查询的全部结果；翻页维持状态，重新搜索或进页重设脱敏。无明码权限时不显示开关且恒为脱敏。

3.1.2　用户资料页的同类控件既有文案为 [Show]；本页刻意使用中文 [查看]／[隐藏]。两页命名不同不是笔误，也不得互相统一。

3.1.3　R-135 已覆盖需求原文 6.4 的「只管当前页、翻页重设」；现行规则只以 §3.1.1 为准。

3.2 后端权限边界

3.2.1　后端在查看与明文导出前都须复核页面权限及 查看手机号，不得信任前端状态。失败时不回传完整号码，沿用既有权限错误处理。

3.3 管理员操作日志

3.3.1　一批查询结果第一次按 [查看] 时写一笔日志；同批重复隐藏／查看不再新增。重新搜索或重新进入页面后，下一次查看属于新批次，再写一笔。

3.3.2　日志只记管理员账号、查看时间与当次 8 个查询条件；不记页码或完整手机号。

3.3.3　必须先确认日志写入成功，再回传明文。日志写入失败时维持脱敏态且不回传明文；错误呈现沿用页面既有机制，不新增文案。

3.3.4　R-135／R-136 已覆盖需求原文 7.1、7.3 的页码要求：开关作用于整批结果，页码不再界定查看范围。

① Requirement in One Sentence

Add a Phone Number column to Backoffice ▸ LogManagement ▸ Freeze / Unfreeze Log. Values are masked by default. An administrator with 查看手机号 permission can reveal clear-text numbers for the complete result from the table header. Access must be logged first, and export follows the header state.

② Fixed Terminology

③ Global Invariants

④ Scope and Exclusions

This release adds the Phone Number column, batch clear-text switch, clear-text permission, and required audit record, and corrects one Chinese Freeze Status option. It does not add phone-number search or per-row reveal and does not change other pages or existing fields. Readers are backoffice frontend, log backend, permission backend, security, and QA teams.

2.1 Position and Name

2.1.1 Add 手机号 after 用户名 as column 3. Its English name is Phone Number. Shift the original columns to the right; the list has 13 columns. The screen header remains Chinese except for the existing Line. Keep Phone Number next to Username when possible.

2.2 Source and Empty Value

2.2.1 Read the member's current Phone Number, independently of Operator. Display the new number after a change. If there is no number, leave the cell empty without a placeholder; this does not affect the batch control.

2.3 Masking Format

2.3.1 Phone Numbers on this platform are fixed at 11 digits. Masking is fixed as the first three digits, five *, and the last three digits:

2.4 Existing Filters and Copy Correction

2.4.1 Keep the eight search fields: Username, Operator, Remarks, Date, User Channel, Operation, Freeze Status, and Line.

2.4.2 Change the fourth Freeze Status option exactly to 可登录和投注，不可充值和提款. Change only the Chinese copy; do not change Freeze Type, decision logic, or existing data.

3.1 Header Control

3.1.1 The control is a blue underlined #0000FF link at the right of the header and does not occupy another column. It controls the complete most recent query result. Page changes preserve the state; a new search or page entry resets to masked. Without clear-text permission, the control is hidden and the result is always masked.

3.1.2 The comparable control on User Info already uses [Show]. This page intentionally uses Chinese [查看]/[隐藏]. The different names are deliberate and must not be unified.

3.1.3 R-135 overrides the source requirement §6.4 rule that covered only the current page and reset on page changes. The current rule is exclusively §3.1.1.

3.2 Backend Permission Boundary

3.2.1 Before a clear-text reveal or clear-text export, the backend must revalidate both page permission and 查看手机号. Do not trust frontend state. On failure, do not return full numbers and use the existing permission-error handling.

3.3 Admin Action Log

3.3.1 Write one log when [查看] is pressed for the first time on a query result. Repeated hide/reveal actions for the same result do not write another record. After another search or page entry, the next reveal belongs to a new result and writes another record.

3.3.2 Record only administrator account, access time, and the eight query conditions. Do not record page number or full Phone Numbers.

3.3.3 Return clear text only after confirming that the log was written successfully. If logging fails, remain masked and do not return clear text. Use the page's existing error presentation and do not add copy.

3.3.4 R-135/R-136 override the page-number requirements in source sections 7.1 and 7.3. The control covers the complete result, and page number no longer defines the access scope.