From 2a92ab64af60f990539b0911341b9954ec256764 Mon Sep 17 00:00:00 2001 From: huang Date: Sat, 28 Mar 2026 10:36:17 +0800 Subject: [PATCH] =?UTF-8?q?fix(perm):=20=E4=BF=AE=E5=A4=8D=E4=BC=81?= =?UTF-8?q?=E4=B8=9A=E8=B4=A6=E5=8F=B7=E8=B5=84=E4=BA=A7=E6=9D=83=E9=99=90?= =?UTF-8?q?=E8=BE=B9=E7=95=8C=20PERM-01/02?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit - PERM-01: 删除 Resolve 接口对企业账号的错误拦截（企业账号应可查询资产） - PERM-02: 在 Refresh 接口开头新增企业账号拦截（企业账号只读，不允许主动触发运营商刷新） --- internal/handler/admin/asset.go | 10 +++++----- 1 file changed, 5 insertions(+), 5 deletions(-) diff --git a/internal/handler/admin/asset.go b/internal/handler/admin/asset.go index 739b974..5fbff96 100644 --- a/internal/handler/admin/asset.go +++ b/internal/handler/admin/asset.go @@ -38,11 +38,6 @@ func NewAssetHandler( // Resolve 通过任意标识符解析资产（设备或卡） // GET /api/admin/assets/resolve/:identifier func (h *AssetHandler) Resolve(c *fiber.Ctx) error { - userType := middleware.GetUserTypeFromContext(c.UserContext()) - if userType == constants.UserTypeEnterprise { - return errors.New(errors.CodeForbidden, "企业账号暂不支持此接口") - } - identifier := c.Params("identifier") if identifier == "" { return errors.New(errors.CodeInvalidParam, "标识符不能为空") @@ -76,6 +71,11 @@ func (h *AssetHandler) RealtimeStatus(c *fiber.Ctx) error { // Refresh 刷新资产状态（调网关同步） // POST /api/admin/assets/:asset_type/:id/refresh func (h *AssetHandler) Refresh(c *fiber.Ctx) error { + // 企业账号只读，不允许主动触发运营商刷新 + userType := middleware.GetUserTypeFromContext(c.UserContext()) + if userType == constants.UserTypeEnterprise { + return errors.New(errors.CodeForbidden, "企业账号无权主动刷新资产状态") + } assetType := c.Params("asset_type") id, err := strconv.ParseUint(c.Params("id"), 10, 64) if err != nil {