- All .dspy files: replace ServerEnv() org_id access with await get_userorgid() (get_userorgid is registered as global in ahserver processorResource) - core.py: simplify _get_db to use DBPools() singleton directly (DBPools is @SingletonDecorator) remove unnecessary db.databases = config.databases assignment - core.py: add MODULE_NAME constant, use env.get_module_dbname(MODULE_NAME) pattern - Create scripts/load_path.py with all RBAC paths per module-development-spec Covers: entry pages, feature .ui files, CRUD directories, all API .dspy endpoints - .gitignore: add __pycache__/ exclusion - All models/*.json and json/*.json pass spec validation checks
46 lines
1.6 KiB
Python
46 lines
1.6 KiB
Python
#!/usr/bin/env python3
|
|
import json, time
|
|
|
|
result = {'widgettype': 'Message', 'options': {'title': 'Error', 'message': 'Invalid', 'type': 'error'}}
|
|
|
|
try:
|
|
user_id = await get_user()
|
|
org_id = (await get_userorgid()) or '0'
|
|
now = time.strftime('%Y-%m-%d %H:%M:%S')
|
|
|
|
dbname = get_module_dbname('product_management')
|
|
data = dict(params_kw)
|
|
record_id = data.pop('id', None)
|
|
if not record_id:
|
|
raise ValueError('Missing id')
|
|
|
|
# Verify belongs to org
|
|
async with DBPools().sqlorContext(dbname) as sor:
|
|
check = await sor.sqlExe(
|
|
"SELECT id FROM product WHERE id = ${id}$ AND org_id = ${org_id}$",
|
|
{'id': record_id, 'org_id': org_id}
|
|
)
|
|
if not check:
|
|
raise ValueError('无权操作该记录')
|
|
|
|
data['updated_at'] = now
|
|
|
|
# If category changed, update product_type
|
|
if data.get('category_id') and not data.get('product_type'):
|
|
cat_check = await sor.sqlExe(
|
|
"SELECT product_type FROM product_category WHERE id = ${category_id}$ AND org_id = ${org_id}$",
|
|
{'category_id': data['category_id'], 'org_id': org_id}
|
|
)
|
|
if cat_check:
|
|
data['product_type'] = cat_check[0].get('product_type', '')
|
|
|
|
async with DBPools().sqlorContext(dbname) as sor:
|
|
await sor.U('product', data, {'id': record_id, 'org_id': org_id})
|
|
|
|
result = {'widgettype': 'Message', 'options': {'title': 'Success', 'message': '产品更新成功', 'type': 'success'}}
|
|
|
|
except Exception as e:
|
|
result['options'] = {'title': 'Error', 'message': '更新失败: ' + str(e), 'type': 'error'}
|
|
|
|
return json.dumps(result, ensure_ascii=False)
|