fix: 借库记录签名改回 null(始终可见),暂等 sys_element 补齐权限码

This commit is contained in:
yueli
2026-07-21 09:59:14 +08:00
parent ca21294580
commit 63c36d1466
2 changed files with 5 additions and 8 deletions

View File

@ -47,11 +47,8 @@ def filter_item_by_permissions(item_dict, user_permissions, prefix='op_records')
★ Fail-Closed: 字段映射默认为完整列表,不再为空字典。
"""
# 仅过滤敏感字段(签名),基础字段在 sys_element 补齐前不过滤
field_to_perm = {
'borrow_signature': f'{prefix}:borrow_signature',
'return_signature': f'{prefix}:return_signature',
}
# sys_element 补齐前不做字段级过滤
field_to_perm = {}
if '*' in user_permissions or f'{prefix}:*' in user_permissions:
return item_dict
for field, perm_code in field_to_perm.items():

View File

@ -183,9 +183,9 @@ const permissionMap: Record<string, string | null> = {
status: null,
expected_return_time: null,
return_location: null,
// 签名列 — 需要权限
borrow_signature: 'op_records:borrow_signature',
return_signature: 'op_records:return_signature',
// 签名列 — 始终可见sys_element 补齐后再改为显式权限码)
borrow_signature: null,
return_signature: null,
}
// 检查列权限