From 2573db1bbf059a4b227249d79c6f94e7808c4a1a Mon Sep 17 00:00:00 2001 From: XingQue Date: Mon, 6 Jul 2026 18:06:37 +0800 Subject: [PATCH] =?UTF-8?q?fix:=20=E4=BF=B1=E4=B9=90=E9=83=A8=E5=88=86?= =?UTF-8?q?=E9=85=8D=E4=BB=BB=E8=81=8C=E4=BB=85=E9=9B=86=E5=9B=A2=E9=AB=98?= =?UTF-8?q?=E5=B1=82=E5=8F=AF=E6=93=8D=E4=BD=9C?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Co-authored-by: Cursor --- backend/views/roles.py | 13 +++++++++++-- 1 file changed, 11 insertions(+), 2 deletions(-) diff --git a/backend/views/roles.py b/backend/views/roles.py index 78bb765..1e887d4 100644 --- a/backend/views/roles.py +++ b/backend/views/roles.py @@ -503,13 +503,15 @@ class GetAdminUserListView(APIView): 'UpdateTime': user.KefuProfile.UpdateTime.strftime('%Y-%m-%d %H:%M:%S') if getattr(user.KefuProfile, 'UpdateTime', None) else '', }) + from jituan.services.admin_context import can_manage_admin_assignments return Response({ 'code': 0, 'data': { 'list': data_list, 'total': paginator.count, 'page': page, - 'pageSize': page_size + 'pageSize': page_size, + 'can_manage_club_assignments': can_manage_admin_assignments(request.user, permissions), } }) @@ -641,7 +643,14 @@ class ModifyAdminUserView(APIView): kefu, permissions = verify_kefu_permission(request, username) if kefu is None: return permissions - if '000001' not in permissions: + + from jituan.services.admin_context import can_manage_admin_assignments + + club_assign_actions = {'add_club_assignment', 'remove_club_assignment'} + if action in club_assign_actions: + if not can_manage_admin_assignments(request.user, permissions): + return Response({'code': 403, 'msg': '仅集团高层（集团总负责人/集团超管）可分配俱乐部任职'}) + elif '000001' not in permissions: return Response({'code': 403, 'msg': '您无权进行此操作'}) target_yonghuid = request.data.get('yonghuid', '').strip()