修复权限判断问题

This commit is contained in:
mtvpls
2025-12-29 01:19:28 +08:00
parent 0a9d952929
commit 56b4d47902
8 changed files with 19 additions and 42 deletions

View File

@@ -92,13 +92,10 @@ export async function POST(request: NextRequest) {
const adminConfig = await getConfig();
// 权限校验
// 权限校验 - 使用v2用户系统
if (username !== process.env.USERNAME) {
// 管理员
const user = adminConfig.UserConfig.Users.find(
(u) => u.username === username
);
if (!user || user.role !== 'admin' || user.banned) {
const userInfo = await db.getUserInfoV2(username);
if (!userInfo || userInfo.role !== 'admin' || userInfo.banned) {
return NextResponse.json({ error: '权限不足' }, { status: 401 });
}
}