diff --git a/apps/ecm/views.py b/apps/ecm/views.py index e2907a13..98c12ecd 100644 --- a/apps/ecm/views.py +++ b/apps/ecm/views.py @@ -87,7 +87,7 @@ class EventViewSet(ListModelMixin, RetrieveModelMixin, DestroyModelMixin, Custom filterset_class = EventFilterSet @transaction.atomic - @action(methods=['post'], detail=True, perms_map={'post': '*'}, + @action(methods=['post'], detail=True, perms_map={'post': 'event.handle'}, serializer_class=EventHandleSerializer) def handle(self, request, pk=None): """处理事件 @@ -95,10 +95,10 @@ class EventViewSet(ListModelMixin, RetrieveModelMixin, DestroyModelMixin, Custom 处理事件 """ obj = self.get_object() - # 判断当前用户有无处理权限 - if (not Remind.objects.filter(event=obj, recipient=request.user, can_handle=True).exists()) and ( - not request.user.is_superuser): - raise PermissionDenied('您无权处理该事件') + # 判断当前用户有无处理权限(废弃, 通过控权实现即可) + # if (not Remind.objects.filter(event=obj, recipient=request.user, can_handle=True).exists()) and ( + # not request.user.is_superuser): + # raise PermissionDenied('您无权处理该事件') data = request.data sr = EventHandleSerializer(instance=obj, data=data) sr.is_valid(raise_exception=True)