@@ -23,7 +23,12 @@ import (
2323)
2424
2525// HandleImportStudentSubjectsExcel 处理Excel导入学生科目
26- func HandleImportStudentSubjectsExcel (c flamego.Context , r flamego.Render ) {
26+ func HandleImportStudentSubjectsExcel (c flamego.Context , r flamego.Render , authInfo auth.Info ) {
27+ // 检查是否是管理员
28+ if ! dao .Managers .IsManager (authInfo .Uid ) {
29+ response .HTTPFail (r , 400013 , "非管理员用户无法创建应用" )
30+ return
31+ }
2732 // 从 FormFile 获取文件
2833 file , header , err := c .Request ().FormFile ("file" )
2934 if err != nil {
@@ -186,6 +191,11 @@ func HandleAddManager(r flamego.Render, c flamego.Context, req dto.AddManagerReq
186191 response .InValidParam (r , errs )
187192 return
188193 }
194+ // 检查是否是管理员
195+ if ! dao .Managers .IsManager (authInfo .Uid ) {
196+ response .HTTPFail (r , 400013 , "非管理员用户无法创建应用" )
197+ return
198+ }
189199 if authInfo .Uid == req .StaffId {
190200 response .HTTPFail (r , 403001 , "不能添加自己" )
191201 return
@@ -226,6 +236,11 @@ func HandleDeleteManager(r flamego.Render, c flamego.Context, req dto.DeleteMana
226236 response .InValidParam (r , errs )
227237 return
228238 }
239+ // 检查是否是管理员
240+ if ! dao .Managers .IsManager (authInfo .Uid ) {
241+ response .HTTPFail (r , 400013 , "非管理员用户无法创建应用" )
242+ return
243+ }
229244
230245 // 防止删除自己
231246 if req .StaffId == authInfo .Uid {
@@ -266,6 +281,11 @@ func HandleGetManagerList(r flamego.Render, c flamego.Context, authInfo auth.Inf
266281 response .HTTPFail (r , 403002 , "permission denied" )
267282 return
268283 }
284+ // 检查是否是管理员
285+ if ! dao .Managers .IsManager (authInfo .Uid ) {
286+ response .HTTPFail (r , 400013 , "非管理员用户无法创建应用" )
287+ return
288+ }
269289 managers , total , err := dao .Managers .GetAllManagers ()
270290 if err != nil {
271291 logx .SystemLogger .CtxError (c .Request ().Context (), err )
0 commit comments