fix: 工单列表权限过滤-developer/auditor也能看到待审工单

- developer之前只能看applicant_id=自己的工单,导致审批人看不到待审工单
- 改为admin看全部,其他角色(包括developer/dba/auditor)都能看到自己提交+自己作为审批人的工单
- E2E全流程验证通过: testtest提交→test123初审→test234复审→admin执行→success
This commit is contained in:
logan committed 2026-06-03 02:06:20 +08:00
1 parent bd8100bfe0
commit 1364c737ef
1 file changed
+3 -3
+3 -3
View File
@@ -84,9 +84,9 @@ func ListTickets(c *gin.Context) {
// Filter by user role // Filter by user role
switch role { switch role {
case "developer": case "admin":
query = query.Where("applicant_id = ?", userID) // admin sees all tickets
case "dba", "auditor": default:
query = query.Where( query = query.Where(
"applicant_id = ? OR id IN (SELECT ticket_id FROM ticket_approvals WHERE approver_id = ?)", "applicant_id = ? OR id IN (SELECT ticket_id FROM ticket_approvals WHERE approver_id = ?)",
userID, userID, userID, userID,