fix: fix jobs view filter backend and defensive queryset
- Replace inline __import__ with proper DjangoFilterBackend import - Add SearchFilter to JobPublicViewSet filter_backends - Add defensive check for missing organization_id in get_queryset Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
This commit is contained in:
parent
f228ff0697
commit
f5d753d441
|
|
@ -1,4 +1,6 @@
|
||||||
from rest_framework import viewsets, permissions
|
from rest_framework import viewsets, permissions
|
||||||
|
from rest_framework.filters import SearchFilter
|
||||||
|
from django_filters.rest_framework import DjangoFilterBackend
|
||||||
from .models import Job
|
from .models import Job
|
||||||
from .serializers import JobListSerializer, JobDetailSerializer
|
from .serializers import JobListSerializer, JobDetailSerializer
|
||||||
from .filters import JobFilter
|
from .filters import JobFilter
|
||||||
|
|
@ -9,6 +11,7 @@ class JobPublicViewSet(viewsets.ReadOnlyModelViewSet):
|
||||||
"""公开只读,仅返回已发布职位"""
|
"""公开只读,仅返回已发布职位"""
|
||||||
queryset = Job.objects.filter(status='published').select_related('organization')
|
queryset = Job.objects.filter(status='published').select_related('organization')
|
||||||
filterset_class = JobFilter
|
filterset_class = JobFilter
|
||||||
|
filter_backends = [DjangoFilterBackend, SearchFilter]
|
||||||
search_fields = ['title', 'description', 'location']
|
search_fields = ['title', 'description', 'location']
|
||||||
permission_classes = [permissions.AllowAny]
|
permission_classes = [permissions.AllowAny]
|
||||||
|
|
||||||
|
|
@ -31,10 +34,15 @@ class JobManageViewSet(viewsets.ModelViewSet):
|
||||||
user = self.request.user
|
user = self.request.user
|
||||||
if user.is_superadmin:
|
if user.is_superadmin:
|
||||||
return Job.objects.all().select_related('organization')
|
return Job.objects.all().select_related('organization')
|
||||||
|
# 防御 organization 为空的情况
|
||||||
|
if not user.organization_id:
|
||||||
|
return Job.objects.none()
|
||||||
return Job.objects.filter(organization=user.organization).select_related('organization')
|
return Job.objects.filter(organization=user.organization).select_related('organization')
|
||||||
|
|
||||||
def perform_create(self, serializer):
|
def perform_create(self, serializer):
|
||||||
if self.request.user.is_admin:
|
if self.request.user.is_admin:
|
||||||
|
# Admin 强制使用自己公司,忽略请求体中的 organization_id
|
||||||
serializer.save(organization=self.request.user.organization)
|
serializer.save(organization=self.request.user.organization)
|
||||||
else:
|
else:
|
||||||
|
# 超管需要在请求体中提供 organization_id
|
||||||
serializer.save()
|
serializer.save()
|
||||||
|
|
|
||||||
Loading…
Reference in New Issue