From f3c946d584abd95ecbf1c78f7be99b5740622abf Mon Sep 17 00:00:00 2001
From: yueli <yueli@example.com>
Date: Fri, 17 Jul 2026 15:22:54 +0800
Subject: [PATCH] =?UTF-8?q?fix:=20=E5=80=9F=E5=BA=93=E5=AE=A1=E6=89=B9?=
 =?UTF-8?q?=E5=90=8C=E6=A0=B7=E4=BF=AE=E5=A4=8D=20=E2=80=94=20sys=5Felemen?=
 =?UTF-8?q?t=20=E8=A1=A5=E5=85=85=20op=5Fborrow=5Fapproval:operation?=
 =?UTF-8?q?=EF=BC=8Ccan=5Fapprove=20=E5=A2=9E=E5=8A=A0=20RBAC=20=E6=9D=83?=
 =?UTF-8?q?=E9=99=90=E5=88=A4=E6=96=AD?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 inventory-backend/app/services/borrow_service.py | 10 ++++++++++
 1 file changed, 10 insertions(+)

diff --git a/inventory-backend/app/services/borrow_service.py b/inventory-backend/app/services/borrow_service.py
index c5cc30d..aedbfb4 100644
--- a/inventory-backend/app/services/borrow_service.py
+++ b/inventory-backend/app/services/borrow_service.py
@@ -296,6 +296,16 @@ class BorrowApprovalService:
         if user_role and user_role.upper() == 'SUPER_ADMIN':
             return True
 
+        # 拥有 op_borrow_approval:operation 权限的用户可以审批任意借库单
+        # (前端按钮以此权限控制显示，后端也必须对齐)
+        from app.models.system import SysRolePermission
+        has_op = SysRolePermission.query.filter(
+            SysRolePermission.role_code == user_role,
+            SysRolePermission.target_code.in_(['op_borrow_approval:operation', 'op_borrow_approval:*'])
+        ).first() is not None
+        if has_op:
+            return True
+
         for approver in approvers:
             approver_type = approver.get('type', '')
             approver_value = approver.get('value', '')