yueli c07f25b646 fix: Fail-Closed 字段级安全加固 — 堵住15+端点价格泄露 ...

## stock.py
- _make_price_stripper(): 工厂函数,选单前缀自动剥离所有价格/成本字段
- _do_get_stock_list(permission_prefix): 每个item.to_dict()后剥离价格
- /all 端点: 非AI模式自动剥离价格字段
- /list 端点: permission_prefix='outbound_selection' 传递

## outbound.py
- /bom-match-stock: 返回前按stock_type剥离全部价格/成本字段
- /scan: result.pop('price', None)

## scrap.py
- /scan: result.pop('price', None)
- /records: 每条记录剥离 cost_at_scrap, total_loss

## transactions.py
- filter_item_by_permissions: 从空字典恢复完整20字段映射
- /borrow/stock-list: permission_prefix='op_borrow_apply' 传递

## buy.py / semi.py / product.py
- submit 成功响应剥离所有价格/成本字段(不泄露给前端)

## bom.py
- /base/list: 剥离 referencePrice

2026-07-16 11:26:05 +08:00

db_migrations

feat: 采购管理税率+分开单价总价列 + 按单出/借库锁定扫描 + 含税法计算

2026-07-15 16:07:59 +08:00

inventory-backend

fix: Fail-Closed 字段级安全加固 — 堵住15+端点价格泄露

2026-07-16 11:26:05 +08:00

inventory-web

feat: 采购模块重构 — 权限驱动的可见性 + 严格操作权限

2026-07-16 11:25:53 +08:00

nginx

fix: correct targeted search logic for material/stock list to prevent unrelated results

2026-03-19 09:49:21 +08:00

库研操作

fix(auth): prevent AttributeError when querying permissions for users with no role

2026-04-14 08:56:47 +08:00

数据爬取

feat: 文件展示与提交逻辑优化

2026-04-23 10:25:28 +08:00

.gitignore

修改条形码为二维码，同时对于扫码展示部分进行修改

2026-02-09 14:48:09 +08:00

commit_msg.txt

fix: correct targeted search logic for material/stock list to prevent unrelated results

2026-03-19 09:49:21 +08:00

db_sync.sql.gz

4.29扫码获取库位小工具接口

2026-04-29 15:40:43 +08:00

deploy_code.sh

feat: 添加参考价格列 + 修复公司筛选跨域问题 + CLIP模型持久化

2026-07-13 17:30:52 +08:00

deploy_full.sh

入库必须添加库位，否则不允许入库

2026-03-18 17:09:48 +08:00

deploy_full.tar.gz

4.29扫码获取库位小工具接口

2026-04-29 15:40:43 +08:00

deploy_patch.sh

fix(auth): prevent AttributeError when querying permissions for users with no role

2026-04-14 08:56:47 +08:00

docker-compose.prod.yml

feat: 添加参考价格列 + 修复公司筛选跨域问题 + CLIP模型持久化

2026-07-13 17:30:52 +08:00

docker-compose.yml

版本变更V3.35将图像的处理统一更换到新表当中

2026-05-26 11:28:26 +08:00

product.template.xlsx

fix: correct targeted search logic for material/stock list to prevent unrelated results

2026-03-19 09:49:21 +08:00

query_audit.py

4.28

2026-04-28 16:07:11 +08:00

query_permissions.py

fix-security-correct-field-permission-mapping-and-403-denial

2026-04-14 15:37:39 +08:00

sync_db.sh

fix(auth): prevent AttributeError when querying permissions for users with no role

2026-04-14 08:56:47 +08:00

upload_odoo_files.sh

4.28

2026-04-28 16:07:11 +08:00

全局系统体检报告.md

feat(repair): decouple material base, sync global sku sequence and add scan/print features

2026-04-08 19:36:14 +08:00

图像信息导入.py

4.28

2026-04-28 16:07:11 +08:00

Description

No description provided

88 MiB

Languages

Python 70.2%

CSS 14.9%

Vue 7.6%

HTML 4.2%

TypeScript 3.1%