From 67d3113fe1b7bd50b04d17324f447b87e950a7c5 Mon Sep 17 00:00:00 2001 From: yueli Date: Wed, 9 Sep 2026 11:19:09 +0800 Subject: [PATCH] =?UTF-8?q?fix(permission):=20=E8=AE=B0=E5=BD=95=E7=AE=A1?= =?UTF-8?q?=E7=90=86=E8=80=85=E8=A7=86=E8=A7=92=E4=BB=85=E8=B6=85=E7=AE=A1?= =?UTF-8?q?/=E4=B8=BB=E7=AE=A1/=E4=BB=93=E5=BA=93=E7=AE=A1=E7=90=86?= =?UTF-8?q?=E5=91=98=EF=BC=8C=E5=8E=BB=E6=8E=89=E5=85=A5=E5=BA=93=E5=91=98?= =?UTF-8?q?/=E5=87=BA=E5=BA=93=E5=91=98?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit - PRIVILEGED_VIEWER_ROLES 收敛为 SUPER_ADMIN/SUPERVISOR/WAREHOUSE_MGR - 入库员(INBOUND)、出库员(OUTBOUND)按普通处理：借还/出库记录只看自己 --- inventory-backend/app/utils/decorators.py | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/inventory-backend/app/utils/decorators.py b/inventory-backend/app/utils/decorators.py index c9d4ffd..d645c4b 100644 --- a/inventory-backend/app/utils/decorators.py +++ b/inventory-backend/app/utils/decorators.py @@ -226,7 +226,8 @@ def _has_cross_domain_permission(user_role, user_company=''): return False -# 能查看“他人借还/出库记录”的管理者角色（库管/主管/超管）。普通申请人只能看自己的记录。 +# 能查看“他人借还/出库记录”的管理者角色（仓库管理员/主管/超管）。普通申请人(含入库员/出库员等)只能看自己的记录。 +# 注意：入库员(INBOUND)、出库员(OUTBOUND)不是管理者视角，不应放此名单；如需让他们看全部请确认为库管角色后再加入。 PRIVILEGED_VIEWER_ROLES = ('SUPER_ADMIN', 'SUPERVISOR', 'WAREHOUSE_MGR')