增加用户访问数据总表

backend/blueprints/admin_api.py

@@ -13,6 +13,24 @@ from werkzeug.security import generate_password_hash
 
 from utils.db import get_db
 from utils.auth import admin_required, get_current_admin_role
+
+
+ALLOWED_DEDUPE_TOTAL_DATA_ADMIN_USERNAMES = {'刘丽泓'}
+
+
+def _can_access_dedupe_total_data(role, current_row):
+    if role == 'super_admin':
+        return True
+    if role != 'admin' or not current_row:
+        return False
+    return (current_row.get('username') or '').strip() in ALLOWED_DEDUPE_TOTAL_DATA_ADMIN_USERNAMES
+
+
+def _ensure_dedupe_total_data_access():
+    role, current_row = get_current_admin_role()
+    if not _can_access_dedupe_total_data(role, current_row):
+        return None, None, (jsonify({'success': False, 'error': '无权限访问数据去重总数据'}), 403)
+    return role, current_row, None
 from ali_oss import upload_file as oss_upload_file
 
 try:
@@ -138,6 +156,7 @@ def list_users():
             'page': page,
             'page_size': page_size,
             'current_user_role': role,
+            'current_user_username': current_row.get('username') or '',
             'admins': admins,
         })
     except Exception as e:
@@ -603,6 +622,9 @@ def upload_version():
 @admin_api.route('/dedupe-total-data')
 @admin_required
 def list_dedupe_total_data():
+    _, _, denied = _ensure_dedupe_total_data_access()
+    if denied:
+        return denied
     page = max(1, int(request.args.get('page', 1)))
     page_size = min(100, max(1, int(request.args.get('page_size', 15))))
     keyword = (request.args.get('keyword') or '').strip()
@@ -634,6 +656,9 @@ def list_dedupe_total_data():
 @admin_api.route('/dedupe-total-data/import/<import_id>')
 @admin_required
 def dedupe_total_data_import_progress(import_id):
+    _, _, denied = _ensure_dedupe_total_data_access()
+    if denied:
+        return denied
     result, error_response, status = _proxy_backend_java(
         'GET',
         f'/api/admin/dedupe-total-data/import/{import_id}',
@@ -658,6 +683,9 @@ def dedupe_total_data_import_progress(import_id):
 @admin_api.route('/dedupe-total-data/import', methods=['POST'])
 @admin_required
 def import_dedupe_total_data():
+    _, _, denied = _ensure_dedupe_total_data_access()
+    if denied:
+        return denied
     file_storage = request.files.get('file')
     if not file_storage or file_storage.filename == '':
         return jsonify({'success': False, 'error': '请选择 Excel 文件'})
@@ -682,6 +710,9 @@ def import_dedupe_total_data():
 @admin_api.route('/dedupe-total-data/delete-import/<import_id>')
 @admin_required
 def dedupe_total_data_delete_import_progress(import_id):
+    _, _, denied = _ensure_dedupe_total_data_access()
+    if denied:
+        return denied
     result, error_response, status = _proxy_backend_java(
         'GET',
         f'/api/admin/dedupe-total-data/delete-import/{import_id}',
@@ -706,6 +737,9 @@ def dedupe_total_data_delete_import_progress(import_id):
 @admin_api.route('/dedupe-total-data/delete-import', methods=['POST'])
 @admin_required
 def delete_import_dedupe_total_data():
+    _, _, denied = _ensure_dedupe_total_data_access()
+    if denied:
+        return denied
     file_storage = request.files.get('file')
     if not file_storage or file_storage.filename == '':
         return jsonify({'success': False, 'error': '请选择 Excel 文件'})
@@ -730,6 +764,9 @@ def delete_import_dedupe_total_data():
 @admin_api.route('/dedupe-total-data', methods=['POST'])
 @admin_required
 def create_dedupe_total_data():
+    _, _, denied = _ensure_dedupe_total_data_access()
+    if denied:
+        return denied
     data = request.get_json() or {}
     payload = {'dataValue': (data.get('data_value') or '').strip()}
     result, error_response, status = _proxy_backend_java(
@@ -754,6 +791,9 @@ def create_dedupe_total_data():
 @admin_api.route('/dedupe-total-data/<int:item_id>', methods=['PUT'])
 @admin_required
 def update_dedupe_total_data(item_id):
+    _, _, denied = _ensure_dedupe_total_data_access()
+    if denied:
+        return denied
     data = request.get_json() or {}
     payload = {'dataValue': (data.get('data_value') or '').strip()}
     result, error_response, status = _proxy_backend_java(
@@ -778,6 +818,9 @@ def update_dedupe_total_data(item_id):
 @admin_api.route('/dedupe-total-data/<int:item_id>', methods=['DELETE'])
 @admin_required
 def delete_dedupe_total_data(item_id):
+    _, _, denied = _ensure_dedupe_total_data_access()
+    if denied:
+        return denied
     result, error_response, status = _proxy_backend_java(
         'DELETE',
         f'/api/admin/dedupe-total-data/{item_id}',