TianyangZhang
54230b6cfd
fix(admin): 简化附件下载，直接使用Django媒体代理
2026-03-25 16:38:25 +08:00
TianyangZhang
79706dd840
fix(admin): 通过API端点下载简历附件，解决HTML问题
2026-03-25 16:35:43 +08:00
TianyangZhang
536be6c1a1
refactor: 调整岗位、应用等模块，适配三栏设计
...
后端变更：
- 岗位序列化器调整，支持组织树形结构
- 应用序列化器更新
- 岗位视图逻辑兼容新的过滤需求
- 新增 JobFavorite 数据库迁移（岗位收藏功能）
- 岗位URL路由配置更新
前端变更：
- 岗位详情页面兼容新设计
- 求职者应用、简历页面样式调整
- 路由配置更新，支持三栏布局
- App.vue 组件调整
- Vite 配置微调
这些调整为首页三栏布局的完整实现提供支撑。
Co-Authored-By: Claude Haiku 4.5 <noreply@anthropic.com>
2026-03-25 13:13:09 +08:00
TianyangZhang
619ca19f87
fix: prevent IDOR in application status update endpoint
...
Replace class-level queryset attribute with get_queryset() method that
scopes Application objects to the requesting admin's organization,
preventing regular admins from modifying applications belonging to
other organizations via pk enumeration.
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-03-25 08:31:31 +08:00
TianyangZhang
0ccd943255
feat: add Application model with status tracking and email notifications
...
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-03-24 17:46:14 +08:00
TianyangZhang
c3466f4866
feat: add custom User model with role-based permissions
...
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-03-24 17:11:40 +08:00
TianyangZhang