duxingchen/KCGL
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix: 出库选单手动添加库存(/v1/inbound/stock/list)加行级公司隔离（三表按 base 公司过滤，超管/跨域不受限）

Browse Source
This commit is contained in:
yueli
2026-09-04 15:55:24 +08:00
parent 2f6027b43c
commit b40aa3ab90
1 changed files with 10 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

10
inventory-backend/app/api/v1/inbound/stock.py
View File

@ -293,11 +293,17 @@ def _do_get_stock_list(permission_prefix=None):
# ★ Fail-Closed: 选单/借用场景默认剥离所有价格成本字段 # ★ Fail-Closed: 选单/借用场景默认剥离所有价格成本字段
_strip_price_fields = _make_price_stripper(permission_prefix) _strip_price_fields = _make_price_stripper(permission_prefix)
# ★ 行级公司隔离：普通用户只能看到本公司的库存（超管/跨域不受限）
from app.utils.decorators import get_current_company_filter
company_limit = get_current_company_filter()
all_items = [] all_items = []
# 1. 采购件 # 1. 采购件
if StockBuy: if StockBuy:
q = StockBuy.query.filter(StockBuy.stock_quantity > 0) q = StockBuy.query.filter(StockBuy.stock_quantity > 0)
if company_limit is not None:
q = q.filter(StockBuy.base.has(MaterialBase.company_name == company_limit))
if keyword: if keyword:
q = q.filter( q = q.filter(
db.or_( db.or_(
@ -322,6 +328,8 @@ def _do_get_stock_list(permission_prefix=None):
if StockSemi: if StockSemi:
try: try:
q = StockSemi.query.filter(StockSemi.stock_quantity > 0) q = StockSemi.query.filter(StockSemi.stock_quantity > 0)
if company_limit is not None:
q = q.filter(StockSemi.base.has(MaterialBase.company_name == company_limit))
if keyword: if keyword:
q = q.filter( q = q.filter(
db.or_( db.or_(
@ -347,6 +355,8 @@ def _do_get_stock_list(permission_prefix=None):
# 3. 成品 # 3. 成品
if StockProduct: if StockProduct:
q = StockProduct.query.filter(StockProduct.stock_quantity > 0) q = StockProduct.query.filter(StockProduct.stock_quantity > 0)
if company_limit is not None:
q = q.filter(StockProduct.base.has(MaterialBase.company_name == company_limit))
if keyword: if keyword:
q = q.filter( q = q.filter(
db.or_( db.or_(