From c86c6f58e9ea4455bd4231ad6d4ccb6be450037c Mon Sep 17 00:00:00 2001
From: yumoqing <yumoqing@gmail.com>
Date: Tue, 2 Jun 2026 16:10:06 +0800
Subject: [PATCH] =?UTF-8?q?fix:=20=E5=B0=86API=E9=80=9A=E9=85=8D=E7=AC=A6?=
 =?UTF-8?q?=E6=94=B9=E4=B8=BA=E9=80=90=E4=B8=AA=E5=88=97=E5=87=BA=E6=89=80?=
 =?UTF-8?q?=E6=9C=89.dspy=E6=96=87=E4=BB=B6?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

- 移除 /api/* 通配符
- 显式列出全部40个API端点文件
- 确保客户角色能访问submit_virtual_create_group.dspy等接口
---
 scripts/load_path.py | 41 ++++++++++++++++++++++++++++++++++++++++-
 1 file changed, 40 insertions(+), 1 deletion(-)

diff --git a/scripts/load_path.py b/scripts/load_path.py
index 6a57721..878a839 100644
--- a/scripts/load_path.py
+++ b/scripts/load_path.py
@@ -64,7 +64,46 @@ PATHS_LOGINED = [
     f"/{MOD}/virtual_view_assets.ui",
 
     # API — 所有 api/ 下的 .dspy（脚本内部通过 get_user() 做权限校验）
-    f"/{MOD}/api/*",
+    f"/{MOD}/api/check_validate.dspy",
+    f"/{MOD}/api/get_asset_type_list.dspy",
+    f"/{MOD}/api/get_org_groups.dspy",
+    f"/{MOD}/api/get_status_list.dspy",
+    f"/{MOD}/api/get_upapp_list.dspy",
+    f"/{MOD}/api/get_vendor_list.dspy",
+    f"/{MOD}/api/get_virtual_groups.dspy",
+    f"/{MOD}/api/rl_asset_create.dspy",
+    f"/{MOD}/api/rl_asset_delete.dspy",
+    f"/{MOD}/api/rl_asset_group_create.dspy",
+    f"/{MOD}/api/rl_asset_group_delete.dspy",
+    f"/{MOD}/api/rl_asset_group_update.dspy",
+    f"/{MOD}/api/rl_asset_update.dspy",
+    f"/{MOD}/api/rl_assets.dspy",
+    f"/{MOD}/api/rl_callback.dspy",
+    f"/{MOD}/api/rl_org_group_create.dspy",
+    f"/{MOD}/api/rl_org_group_delete.dspy",
+    f"/{MOD}/api/rl_org_group_update.dspy",
+    f"/{MOD}/api/rl_query_groups.dspy",
+    f"/{MOD}/api/rl_status.dspy",
+    f"/{MOD}/api/rl_upload.dspy",
+    f"/{MOD}/api/rl_vendor_config_create.dspy",
+    f"/{MOD}/api/rl_vendor_config_delete.dspy",
+    f"/{MOD}/api/rl_vendor_config_update.dspy",
+    f"/{MOD}/api/rl_verify.dspy",
+    f"/{MOD}/api/rl_virtual_assets.dspy",
+    f"/{MOD}/api/rl_virtual_create_group.dspy",
+    f"/{MOD}/api/rl_virtual_groups.dspy",
+    f"/{MOD}/api/rl_virtual_status.dspy",
+    f"/{MOD}/api/rl_virtual_upload.dspy",
+    f"/{MOD}/api/submit_create_validate.dspy",
+    f"/{MOD}/api/submit_list_assets.dspy",
+    f"/{MOD}/api/submit_query_status.dspy",
+    f"/{MOD}/api/submit_upload.dspy",
+    f"/{MOD}/api/submit_virtual_create_group.dspy",
+    f"/{MOD}/api/submit_virtual_list_assets.dspy",
+    f"/{MOD}/api/submit_virtual_upload.dspy",
+    f"/{MOD}/api/sync_asset_status.dspy",
+    f"/{MOD}/api/sync_assets.dspy",
+    f"/{MOD}/api/sync_from_vendor.dspy",
 ]
 
 # reseller.operator — 管理员专属页面