清理全局角色残留并修复项目权限判断
This commit is contained in:
@@ -30,8 +30,7 @@ ROLE_ACTIONS: dict[str, set[str]] = {
|
||||
|
||||
|
||||
def is_allowed(action: str, user, membership) -> bool:
|
||||
role_value = user.role.value if hasattr(user.role, "value") else str(user.role)
|
||||
if role_value == "ADMIN":
|
||||
if getattr(user, "is_admin", False):
|
||||
return action in ROLE_ACTIONS["ADMIN"]
|
||||
member_role = getattr(membership, "role_in_study", None)
|
||||
if member_role:
|
||||
|
||||
Reference in New Issue
Block a user