feat: 权限控制

This commit is contained in:
李如威 2025-09-22 18:05:43 +08:00
parent 96175f670b
commit 127772bd88
2 changed files with 7 additions and 3 deletions

View File

@ -283,10 +283,14 @@ def create_app():
return BaseResponse()
@app.get("/api/flows", tags=["Flow"], description="任务列表", response_model=TableResponse)
async def flows_list():
async def flows_list(user: DB.User = Depends(get_current_user)):
global_tasks = app.state.tasks
global_status = app.state.task_nodes
work_list = await DB.Work.filter(is_deleted=0).order_by("-id")
db_filter = { "id_deleted": 0 }
if user.level != 0:
work_ids = await DB.WorkUserRelation.filter(user_id=user.id).values_list("work_id", flat=True)
db_filter["id__in": work_ids if work_ids else [0]]
work_list = await DB.Work.filter(**db_filter).order_by("-id")
work_ids = [x.id for x in work_list]
work_content_list = await DB.WorkContent.filter(work_id__in=work_ids).all()
sub_logs = await DB.WorkLogs.filter(work_id__in=work_ids).annotate(max_id=Max("id")).values_list("max_id", flat=True)

View File

@ -50,7 +50,7 @@ class WorkContent(BaseModel):
table = "tb_work_content"
class TaskUserRelation(BaseModel):
class WorkUserRelation(BaseModel):
work_id = fields.IntField()
user_id = fields.IntField()