From 770c5f73c0a93c8e5f995f88445bde14ec8bfa80 Mon Sep 17 00:00:00 2001 From: ahhui Date: Tue, 1 Aug 2023 15:25:42 +0800 Subject: [PATCH] =?UTF-8?q?fix(=E9=83=A8=E9=97=A8):=20=20=E4=BF=AE?= =?UTF-8?q?=E5=A4=8D=E9=83=A8=E9=97=A8=E6=8E=92=E5=BA=8Fbug?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit 修复添加新部门后排序值依旧是1导致前端上移下移部门时不生效的bug，添加部门上移下移的权限校验 --- backend/dvadmin/system/views/dept.py | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) diff --git a/backend/dvadmin/system/views/dept.py b/backend/dvadmin/system/views/dept.py index da88fc5..70ee9fd 100644 --- a/backend/dvadmin/system/views/dept.py +++ b/backend/dvadmin/system/views/dept.py @@ -69,6 +69,8 @@ class DeptCreateUpdateSerializer(CustomModelSerializer): value = validated_data.get('parent', None) if value is None: validated_data['parent'] = self.request.user.dept + last_sort = Dept.objects.filter(parent=self.request.user.dept).order_by('-sort').first().sort + validated_data['sort'] = last_sort + 1 instance = super().create(validated_data) instance.dept_belong_id = instance.id instance.save() @@ -156,7 +158,7 @@ class DeptViewSet(CustomModelViewSet): data = queryset.filter(status=True).order_by('sort').values('name', 'id', 'parent') return DetailResponse(data=data, msg="获取成功") - @action(methods=['POST'], detail=False, permission_classes=[]) + @action(methods=['POST'], detail=False, permission_classes=[IsAuthenticated]) def move_up(self, request): """部门上移""" dept_id = request.data.get('dept_id') @@ -172,7 +174,7 @@ class DeptViewSet(CustomModelViewSet): return SuccessResponse(data=[], msg="上移成功") - @action(methods=['POST'], detail=False, permission_classes=[]) + @action(methods=['POST'], detail=False, permission_classes=[IsAuthenticated]) def move_down(self, request): """部门下移""" dept_id = request.data['dept_id']