|
@@ -327,13 +327,14 @@ export function createCrudRoutes<
|
|
|
.openapi(getRouteDef, async (c: any) => {
|
|
.openapi(getRouteDef, async (c: any) => {
|
|
|
try {
|
|
try {
|
|
|
const { id } = c.req.valid('param');
|
|
const { id } = c.req.valid('param');
|
|
|
|
|
+ const user = c.get('user');
|
|
|
|
|
|
|
|
const crudService = new ConcreteCrudService(entity, {
|
|
const crudService = new ConcreteCrudService(entity, {
|
|
|
userTracking: userTracking,
|
|
userTracking: userTracking,
|
|
|
relationFields: relationFields,
|
|
relationFields: relationFields,
|
|
|
dataPermission: dataPermission
|
|
dataPermission: dataPermission
|
|
|
});
|
|
});
|
|
|
- const result = await crudService.getById(id, relations || []);
|
|
|
|
|
|
|
+ const result = await crudService.getById(id, relations || [], user?.id);
|
|
|
|
|
|
|
|
if (!result) {
|
|
if (!result) {
|
|
|
return c.json({ code: 404, message: '资源不存在' }, 404);
|
|
return c.json({ code: 404, message: '资源不存在' }, 404);
|
|
@@ -471,13 +472,14 @@ export function createCrudRoutes<
|
|
|
.openapi(getRouteDef, async (c: any) => {
|
|
.openapi(getRouteDef, async (c: any) => {
|
|
|
try {
|
|
try {
|
|
|
const { id } = c.req.valid('param');
|
|
const { id } = c.req.valid('param');
|
|
|
|
|
+ const user = c.get('user');
|
|
|
|
|
|
|
|
const crudService = new ConcreteCrudService(entity, {
|
|
const crudService = new ConcreteCrudService(entity, {
|
|
|
userTracking: userTracking,
|
|
userTracking: userTracking,
|
|
|
relationFields: relationFields,
|
|
relationFields: relationFields,
|
|
|
dataPermission: dataPermission
|
|
dataPermission: dataPermission
|
|
|
});
|
|
});
|
|
|
- const result = await crudService.getById(id, relations || []);
|
|
|
|
|
|
|
+ const result = await crudService.getById(id, relations || [], user?.id);
|
|
|
|
|
|
|
|
if (!result) {
|
|
if (!result) {
|
|
|
return c.json({ code: 404, message: '资源不存在' }, 404);
|
|
return c.json({ code: 404, message: '资源不存在' }, 404);
|