diff --git a/controller/maintenance_fee.go b/controller/maintenance_fee.go index 7732b0a..c420d0e 100644 --- a/controller/maintenance_fee.go +++ b/controller/maintenance_fee.go @@ -15,7 +15,7 @@ import ( ) func InitializeMaintenanceFeeController(router *gin.Engine) { - router.GET("/maintenance/fee", security.EnterpriseAuthorize, listMaintenanceFees) + router.GET("/maintenance/fee", security.MustAuthenticated, listMaintenanceFees) router.POST("/maintenance/fee", security.EnterpriseAuthorize, createMaintenanceFeeRecord) router.PUT("/maintenance/fee/:mid", security.EnterpriseAuthorize, modifyMaintenanceFeeRecord) router.PUT("/maintenance/fee/:mid/enabled", security.EnterpriseAuthorize, changeMaintenanceFeeState) @@ -56,8 +56,11 @@ func listMaintenanceFees(c *gin.Context) { return } if len(requestPark) > 0 { - if !ensureParkBelongs(c, result, requestPark) { - return + if userSession.Type == model.USER_TYPE_ENT { + if !ensureParkBelongs(c, result, requestPark) { + result.Unauthorized("只能访问属于自己的园区。") + return + } } fees, total, err := service.MaintenanceFeeService.ListMaintenanceFees([]string{requestPark}, requestPeriod, requestPage) if err != nil {