From 6f6af7553a9a4bce924eb8d624716b5cf3502397 Mon Sep 17 00:00:00 2001 From: TermiNexus Date: Fri, 19 Jun 2026 02:05:40 +0800 Subject: [PATCH] =?UTF-8?q?=E7=BB=B4=E6=8A=A4?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- backend/utils.py | 3 +++ 1 file changed, 3 insertions(+) diff --git a/backend/utils.py b/backend/utils.py index 7ee12bf..03603e1 100644 --- a/backend/utils.py +++ b/backend/utils.py @@ -90,6 +90,9 @@ def verify_kefu_permission(request, username_from_frontend=None): return None, Response({'code': 403, 'msg': '客服账号已被禁用'}, status=403) except ObjectDoesNotExist: return None, Response({'code': 403, 'msg': '客服账号不存在'}, status=403) + else: + # 管理员无需客服扩展表，用 True 占位以通过 kefu_obj is None 检查 + kefu = True # ---------- 3. 越权检测（只记录前端篡改username的情况） ---------- if username_from_frontend and current_user.Phone != username_from_frontend: