From eea05cf6f3e8b98a2966b62189d9c7d542e90864 Mon Sep 17 00:00:00 2001 From: caoqianming Date: Wed, 12 Apr 2023 15:50:58 +0800 Subject: [PATCH] =?UTF-8?q?refector:=20=E4=BA=8B=E4=BB=B6=E5=A4=84?= =?UTF-8?q?=E7=90=86=E5=8F=96=E6=B6=88=E4=B8=80=E4=BA=9B=E9=99=90=E5=88=B6?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- apps/ecm/views.py | 10 +++++----- 1 file changed, 5 insertions(+), 5 deletions(-) diff --git a/apps/ecm/views.py b/apps/ecm/views.py index e2907a13..98c12ecd 100644 --- a/apps/ecm/views.py +++ b/apps/ecm/views.py @@ -87,7 +87,7 @@ class EventViewSet(ListModelMixin, RetrieveModelMixin, DestroyModelMixin, Custom filterset_class = EventFilterSet @transaction.atomic - @action(methods=['post'], detail=True, perms_map={'post': '*'}, + @action(methods=['post'], detail=True, perms_map={'post': 'event.handle'}, serializer_class=EventHandleSerializer) def handle(self, request, pk=None): """处理事件 @@ -95,10 +95,10 @@ class EventViewSet(ListModelMixin, RetrieveModelMixin, DestroyModelMixin, Custom 处理事件 """ obj = self.get_object() - # 判断当前用户有无处理权限 - if (not Remind.objects.filter(event=obj, recipient=request.user, can_handle=True).exists()) and ( - not request.user.is_superuser): - raise PermissionDenied('您无权处理该事件') + # 判断当前用户有无处理权限(废弃, 通过控权实现即可) + # if (not Remind.objects.filter(event=obj, recipient=request.user, can_handle=True).exists()) and ( + # not request.user.is_superuser): + # raise PermissionDenied('您无权处理该事件') data = request.data sr = EventHandleSerializer(instance=obj, data=data) sr.is_valid(raise_exception=True)