yumoqing/reallife_asset
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix: 将API通配符改为逐个列出所有.dspy文件

Browse Source 
- 移除 /api/* 通配符
- 显式列出全部40个API端点文件
- 确保客户角色能访问submit_virtual_create_group.dspy等接口
This commit is contained in:
yumoqing 2026-06-02 16:10:06 +08:00
parent b550281222
commit c86c6f58e9
1 changed files with 40 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

41
scripts/load_path.py
View File

@ -64,7 +64,46 @@ PATHS_LOGINED = [
f"/{MOD}/virtual_view_assets.ui",
# API — 所有 api/ 下的 .dspy（脚本内部通过 get_user() 做权限校验）
f"/{MOD}/api/*",
f"/{MOD}/api/check_validate.dspy",
f"/{MOD}/api/get_asset_type_list.dspy",
f"/{MOD}/api/get_org_groups.dspy",
f"/{MOD}/api/get_status_list.dspy",
f"/{MOD}/api/get_upapp_list.dspy",
f"/{MOD}/api/get_vendor_list.dspy",
f"/{MOD}/api/get_virtual_groups.dspy",
f"/{MOD}/api/rl_asset_create.dspy",
f"/{MOD}/api/rl_asset_delete.dspy",
f"/{MOD}/api/rl_asset_group_create.dspy",
f"/{MOD}/api/rl_asset_group_delete.dspy",
f"/{MOD}/api/rl_asset_group_update.dspy",
f"/{MOD}/api/rl_asset_update.dspy",
f"/{MOD}/api/rl_assets.dspy",
f"/{MOD}/api/rl_callback.dspy",
f"/{MOD}/api/rl_org_group_create.dspy",
f"/{MOD}/api/rl_org_group_delete.dspy",
f"/{MOD}/api/rl_org_group_update.dspy",
f"/{MOD}/api/rl_query_groups.dspy",
f"/{MOD}/api/rl_status.dspy",
f"/{MOD}/api/rl_upload.dspy",
f"/{MOD}/api/rl_vendor_config_create.dspy",
f"/{MOD}/api/rl_vendor_config_delete.dspy",
f"/{MOD}/api/rl_vendor_config_update.dspy",
f"/{MOD}/api/rl_verify.dspy",
f"/{MOD}/api/rl_virtual_assets.dspy",
f"/{MOD}/api/rl_virtual_create_group.dspy",
f"/{MOD}/api/rl_virtual_groups.dspy",
f"/{MOD}/api/rl_virtual_status.dspy",
f"/{MOD}/api/rl_virtual_upload.dspy",
f"/{MOD}/api/submit_create_validate.dspy",
f"/{MOD}/api/submit_list_assets.dspy",
f"/{MOD}/api/submit_query_status.dspy",
f"/{MOD}/api/submit_upload.dspy",
f"/{MOD}/api/submit_virtual_create_group.dspy",
f"/{MOD}/api/submit_virtual_list_assets.dspy",
f"/{MOD}/api/submit_virtual_upload.dspy",
f"/{MOD}/api/sync_asset_status.dspy",
f"/{MOD}/api/sync_assets.dspy",
f"/{MOD}/api/sync_from_vendor.dspy",
]
# reseller.operator — 管理员专属页面