From 41160bbfad2daf9f81d61e14c713d83cf1d55cff Mon Sep 17 00:00:00 2001 From: Mimingguang <498526323@qq.com> Date: Thu, 10 Sep 2026 15:32:32 +0800 Subject: [PATCH] =?UTF-8?q?docs(changelog):=20#7411=20frontmatter=20?= =?UTF-8?q?=E5=9B=9E=E5=86=99=20not=5Frequired?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- .../10_7411_团期核单共享成本三端点补判权-修改接口-管理后台.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/changelogs-v2/2026-09/10_7411_团期核单共享成本三端点补判权-修改接口-管理后台.md b/changelogs-v2/2026-09/10_7411_团期核单共享成本三端点补判权-修改接口-管理后台.md index 52af6772..905d1334 100644 --- a/changelogs-v2/2026-09/10_7411_团期核单共享成本三端点补判权-修改接口-管理后台.md +++ b/changelogs-v2/2026-09/10_7411_团期核单共享成本三端点补判权-修改接口-管理后台.md @@ -7,12 +7,12 @@ author: "wx(GIT)" change_type: "修改接口" backend_status: "deployed" gateway_status: "not_required" -frontend_status: "pending" +frontend_status: "not_required" frontend_owner: "mmg" frontend_ref: "" target_release: "" verified_at: "" -status_note: "本篇覆盖 PR #7447(合并提交 856ab69bf)。GroupBatchSettlementController 三个端点此前零判权,本次仅在 Controller 入口各加一行 permissionGuard.require(...),Service/Mapper 逻辑与请求响应结构均未改动。2026-09-10 已部署测试服(HEAD 6d41d6148,已验 856ab69bf 为其祖先),并用真实登录态过网关实测完四档权限矩阵:持码账号两个 GET 放行、POST 写入成功并回读到 created_by 与登录账号一致;无码账号三个端点均返 589507,且 SQL 前后对比证明 order_batch_settlement 零行写入、幂等键未被占用、团期状态未变。网关零改动(/v3/admin/** 已在 hl-gateway application.yml:249 通配,Issue #3264),故 gateway_status=not_required。" +status_note: "not_required 2026-09-10 mmg: 三端点请求/响应结构零改动,仅补判权(读 finance:view/写 finance:advance,不持码 589507 HTTP200)。实证两点:①前端惯例从不按 group-batch 权限码显隐(orderV2Batch.js:59 注释 589507 由拦截器统一弹;同码 groupBatchFinance.js 财务总览/预支端点亦可见即可点+589507 兜底),不新增显隐;②结算共享成本三端点(settlement/cost、settlement/summary)前端根本无封装/无消费方(grep 仅命中 groupBatchFinance.js 注释),纯后端收紧,无既有调用方会撞 589507。589507 由 request 拦截器透后端 message 自动弹出。后端建议的按码隐藏 UI 与本项目「可见即可点」惯例冲突,且三端点暂无前端入口,不接线。" updated_at: "2026-09-10" base: "dev-v3" ---