更新各项内容

go/controllers/backend_erp_supplier.go

@@ -224,6 +224,7 @@ func (c *BackendErpSupplierController) Create() {
 		BankAccount:       strings.TrimSpace(p.BankAccount),
 		RegisteredAddress: strings.TrimSpace(p.RegisteredAddress),
 		RegisteredPhone:   strings.TrimSpace(p.RegisteredPhone),
+		CreateUserID:      fmt.Sprintf("%d", claims.UserID),
 		CreateTime:        time.Now(),
 		UpdateTime:        time.Now(),
 	}
@@ -366,6 +367,22 @@ func (c *BackendErpSupplierController) Delete() {
 		return
 	}
 
+	// 删除权限：仅平台管理员、租户管理员或创建人本人可删除
+	var supplier models.TenantCrmSupplier
+	if err := models.Orm.QueryTable(new(models.TenantCrmSupplier)).
+		Filter("id", id).
+		Filter("tenant_id", fmt.Sprintf("%d", claims.TenantId)).
+		Filter("delete_time__isnull", true).
+		One(&supplier); err != nil {
+		c.supplierJsonErr(404, 404, "供应商未找到")
+		return
+	}
+	if !canDeleteCrmRecord(claims, supplier.CreateUserID) {
+		c.supplierJsonErr(403, 403, "只有创建人、租户管理员或平台管理员可以删除该供应商")
+		return
+	}
+
+	// 软删除：仅置 delete_time，不物理删除
 	now := time.Now()
 	_, err = models.Orm.QueryTable(new(models.TenantCrmSupplier)).
 		Filter("id", id).