v1.2.32: 修复admin删除资讯权限问题

This commit is contained in:
甲辰生产 2026-03-31 18:24:46 +08:00
parent 6cacf7098e
commit bfa92b307b
2 changed files with 8 additions and 4 deletions

View File

@ -417,10 +417,14 @@ def delete_information(
db: Session = Depends(get_db)
):
"""删除资讯"""
info = db.query(Information).filter(
Information.id == info_id,
Information.user_id == current_user.f99_90_id
).first()
# 允许admin删除任何人的资讯
if current_user.role == "admin":
info = db.query(Information).filter(Information.id == info_id).first()
else:
info = db.query(Information).filter(
Information.id == info_id,
Information.user_id == current_user.f99_90_id
).first()
if not info:
raise HTTPException(status_code=404, detail="资讯不存在或无权删除")

Binary file not shown.

After

Width:  |  Height:  |  Size: 133 KiB