diff --git a/internal/handler/admin/asset.go b/internal/handler/admin/asset.go index 44288efc..dc0ffb8b 100644 --- a/internal/handler/admin/asset.go +++ b/internal/handler/admin/asset.go @@ -292,9 +292,6 @@ func (h *AssetHandler) CurrentPackage(c *fiber.Ctx) error { // UpdatePackageExpiresAt 修改资产套餐过期时间 // PATCH /api/admin/assets/:identifier/packages/:package_usage_id/expires-at func (h *AssetHandler) UpdatePackageExpiresAt(c *fiber.Ctx) error { - if err := ensureAssetPackageAdjuster(c); err != nil { - return err - } asset, packageUsageID, err := h.resolveAssetPackageUsagePath(c) if err != nil { @@ -321,10 +318,6 @@ func (h *AssetHandler) UpdatePackageExpiresAt(c *fiber.Ctx) error { // UpdatePackageUsage 修改资产套餐已用量 // PATCH /api/admin/assets/:identifier/packages/:package_usage_id/used-data func (h *AssetHandler) UpdatePackageUsage(c *fiber.Ctx) error { - if err := ensureAssetPackageAdjuster(c); err != nil { - return err - } - asset, packageUsageID, err := h.resolveAssetPackageUsagePath(c) if err != nil { return err @@ -646,14 +639,6 @@ func (h *AssetHandler) resolveAssetPackageUsagePath(c *fiber.Ctx) (*dto.AssetRes return asset, uint(packageUsageID), nil } - -func ensureAssetPackageAdjuster(c *fiber.Ctx) error { - if middleware.GetUserIDFromContext(c.UserContext()) != 1124 && middleware.GetUserIDFromContext(c.UserContext()) != 127 { - return errors.New(errors.CodeForbidden, "无权限操作该资源或资源不存在") - } - return nil -} - func parseAssetPackageTime(value string) (time.Time, error) { raw := strings.TrimSpace(value) if raw == "" { diff --git a/internal/routes/asset.go b/internal/routes/asset.go index 74506051..ea012ce4 100644 --- a/internal/routes/asset.go +++ b/internal/routes/asset.go @@ -58,7 +58,7 @@ func registerAssetRoutes(router fiber.Router, handler *admin.AssetHandler, walle Register(assets, doc, groupPath, "PATCH", "/:identifier/packages/:package_usage_id/expires-at", handler.UpdatePackageExpiresAt, RouteSpec{ Summary: "修改资产套餐过期时间", - Description: "修改指定资产下某条套餐使用记录的过期时间。仅账号ID为2的账号可调用。", + Description: "修改指定资产下某条套餐使用记录的过期时间。仅允许已认证账号调用,并保留资产与套餐记录归属校验。", Tags: []string{"资产管理"}, Input: new(dto.UpdateAssetPackageExpiresAtRequest), Output: new(dto.AssetPackageResponse), @@ -67,7 +67,7 @@ func registerAssetRoutes(router fiber.Router, handler *admin.AssetHandler, walle Register(assets, doc, groupPath, "PATCH", "/:identifier/packages/:package_usage_id/used-data", handler.UpdatePackageUsage, RouteSpec{ Summary: "修改资产套餐已用量", - Description: "修改指定资产下某条套餐使用记录的真实已用量(MB)。仅账号ID为2的账号可调用。", + Description: "修改指定资产下某条套餐使用记录的真实已用量(MB)。仅允许已认证账号调用,并保留资产与套餐记录归属校验。", Tags: []string{"资产管理"}, Input: new(dto.UpdateAssetPackageUsageRequest), Output: new(dto.AssetPackageResponse),