fix-security-correct-field-permission-mapping-and-403-denial

2026-04-14 15:37:39 +08:00
parent ae05f3bb75
commit 477da7c434
4 changed files with 66 additions and 4 deletions
--- a/inventory-backend/app/api/v1/inbound/buy.py
+++ b/inventory-backend/app/api/v1/inbound/buy.py
@ -43,8 +43,8 @@ def filter_item_by_permissions(item_dict, user_permissions):
        'sku': 'inbound_buy:sku',
        'barcode': 'inbound_buy:barcode',
        'in_date': 'inbound_buy:in_date',
-        'serial_number': 'inbound_buy:serial_number',
-        'batch_number': 'inbound_buy:batch_number',
+        'serial_number': 'inbound_buy:sn_bn',
+        'batch_number': 'inbound_buy:sn_bn',
        'status': 'inbound_buy:status',
        'in_quantity': 'inbound_buy:in_quantity',
        'stock_quantity': 'inbound_buy:stock_quantity',