管理员也不能更新别人的节点

This commit is contained in:
qing committed 2026-07-25 14:25:06 +08:00
1 parent 3e9ff99eaa
commit 17c22a8cd3
1 file changed
+2 -3
+2 -3
View File
@@ -403,9 +403,8 @@ def update_note():
data = call_db_service(DB_SERVER_URL, select_payload) data = call_db_service(DB_SERVER_URL, select_payload)
notes = data['data'] notes = data['data']
if not info['user'] == 'admin': if not len(notes) == 1 or not notes[0]['owner'] == info['user']:
if not len(notes) == 1 or not notes[0]['owner'] == info['user']: return jsonify({"error": 'It\'s not your note'}), 403
return jsonify({"error": 'It\'s not your note'}), 403
# 内容审查 # 内容审查
review = review_content(title + '\n' + content, 10) review = review_content(title + '\n' + content, 10)