越权问题

2026-07-28 18:44:39 +08:00
parent dc080436bf
commit b3a215b19e
4 changed files with 22 additions and 3 deletions
--- a/internal/store/postgres/agent_recharge_store.go
+++ b/internal/store/postgres/agent_recharge_store.go
@@ -49,7 +49,7 @@ func (s *AgentRechargeStore) GetByRechargeNo(ctx context.Context, rechargeNo str
 // GetByID 根据 ID 查询
 func (s *AgentRechargeStore) GetByID(ctx context.Context, id uint) (*model.AgentRechargeRecord, error) {
 	var record model.AgentRechargeRecord
-	query := middleware.ApplyShopFilter(ctx, s.db.WithContext(ctx).Model(&model.AgentRechargeRecord{}))
+	query := middleware.ApplyStrictShopFilter(ctx, s.db.WithContext(ctx).Model(&model.AgentRechargeRecord{}))
 	if err := query.First(&record, id).Error; err != nil {
 		return nil, err
 	}