更新操作日志和登录日志的数据隔离

go/controllers/backend_operation_log.go

@@ -48,10 +48,13 @@ func (c *BackendOperationLogController) jsonErr(httpStatus, bizCode int, msg str
 
 // List GET /backend/operationLogs?page=1&pageSize=20&keyword=&module=&action=&status=&startTime=&endTime=
 func (c *BackendOperationLogController) List() {
-	if _, err := c.backendClaims(); err != nil {
+	claims, err := c.backendClaims()
+	if err != nil {
 		c.jsonErr(401, 401, err.Error())
 		return
 	}
+	uid := uint64(claims.UserID)
+	tid := uint64(claims.TenantId)
 
 	page, _ := c.GetInt("page", 1)
 	pageSize, _ := c.GetInt("pageSize", 20)
@@ -72,7 +75,10 @@ func (c *BackendOperationLogController) List() {
 	startTimeStr := strings.TrimSpace(c.GetString("startTime"))
 	endTimeStr := strings.TrimSpace(c.GetString("endTime"))
 
-	qs := models.Orm.QueryTable(new(models.SystemOperationLog)).Filter("delete_time__isnull", true)
+	qs := models.Orm.QueryTable(new(models.SystemOperationLog)).
+		Filter("delete_time__isnull", true).
+		Filter("tid", tid).
+		Filter("user_id", uid)
 
 	// 条件拼装
 	cond := orm.NewCondition()
@@ -174,10 +180,13 @@ func (c *BackendOperationLogController) List() {
 
 // Detail GET /backend/operationLogs/:id
 func (c *BackendOperationLogController) Detail() {
-	if _, err := c.backendClaims(); err != nil {
+	claims, err := c.backendClaims()
+	if err != nil {
 		c.jsonErr(401, 401, err.Error())
 		return
 	}
+	uid := uint64(claims.UserID)
+	tid := uint64(claims.TenantId)
 	idStr := c.Ctx.Input.Param(":id")
 	id, err := strconv.ParseUint(idStr, 10, 64)
 	if err != nil || id == 0 {
@@ -187,6 +196,8 @@ func (c *BackendOperationLogController) Detail() {
 	var row models.SystemOperationLog
 	err = models.Orm.QueryTable(new(models.SystemOperationLog)).
 		Filter("id", id).
+		Filter("tid", tid).
+		Filter("user_id", uid).
 		Filter("delete_time__isnull", true).
 		One(&row)
 	if err != nil {
@@ -219,10 +230,13 @@ func (c *BackendOperationLogController) Detail() {
 
 // Delete DELETE /backend/operationLogs/:id
 func (c *BackendOperationLogController) Delete() {
-	if _, err := c.backendClaims(); err != nil {
+	claims, err := c.backendClaims()
+	if err != nil {
 		c.jsonErr(401, 401, err.Error())
 		return
 	}
+	uid := uint64(claims.UserID)
+	tid := uint64(claims.TenantId)
 	idStr := c.Ctx.Input.Param(":id")
 	id, err := strconv.ParseUint(idStr, 10, 64)
 	if err != nil || id == 0 {
@@ -232,6 +246,8 @@ func (c *BackendOperationLogController) Delete() {
 	now := time.Now()
 	n, err := models.Orm.QueryTable(new(models.SystemOperationLog)).
 		Filter("id", id).
+		Filter("tid", tid).
+		Filter("user_id", uid).
 		Filter("delete_time__isnull", true).
 		Update(map[string]interface{}{"delete_time": now})
 	if err != nil {
@@ -252,10 +268,13 @@ type backendBatchDeletePayload struct {
 
 // BatchDelete POST /backend/operationLogs/batchDelete
 func (c *BackendOperationLogController) BatchDelete() {
-	if _, err := c.backendClaims(); err != nil {
+	claims, err := c.backendClaims()
+	if err != nil {
 		c.jsonErr(401, 401, err.Error())
 		return
 	}
+	uid := uint64(claims.UserID)
+	tid := uint64(claims.TenantId)
 	raw, err := io.ReadAll(c.Ctx.Request.Body)
 	if err != nil {
 		c.jsonErr(400, 400, "参数错误")
@@ -273,6 +292,8 @@ func (c *BackendOperationLogController) BatchDelete() {
 	now := time.Now()
 	_, err = models.Orm.QueryTable(new(models.SystemOperationLog)).
 		Filter("id__in", p.IDs).
+		Filter("tid", tid).
+		Filter("user_id", uid).
 		Filter("delete_time__isnull", true).
 		Update(map[string]interface{}{"delete_time": now})
 	if err != nil {
@@ -286,14 +307,19 @@ func (c *BackendOperationLogController) BatchDelete() {
 // Statistics GET /backend/operationLogs/statistics
 // 供前端筛选项：modules/actions
 func (c *BackendOperationLogController) Statistics() {
-	if _, err := c.backendClaims(); err != nil {
+	claims, err := c.backendClaims()
+	if err != nil {
 		c.jsonErr(401, 401, err.Error())
 		return
 	}
+	uid := uint64(claims.UserID)
+	tid := uint64(claims.TenantId)
 
 	var moduleRows []models.SystemOperationLog
 	_, _ = models.Orm.QueryTable(new(models.SystemOperationLog)).
 		Filter("delete_time__isnull", true).
+		Filter("tid", tid).
+		Filter("user_id", uid).
 		Filter("module__isnull", false).
 		Limit(1000).
 		All(&moduleRows, "Module")
@@ -312,6 +338,8 @@ func (c *BackendOperationLogController) Statistics() {
 	var actionRows []models.SystemOperationLog
 	_, _ = models.Orm.QueryTable(new(models.SystemOperationLog)).
 		Filter("delete_time__isnull", true).
+		Filter("tid", tid).
+		Filter("user_id", uid).
 		Filter("action__isnull", false).
 		Limit(1000).
 		All(&actionRows, "Action")