feat: 优化发布清单和安装结构自动识别

app/api/routes/admin_version.py

@@ -7,7 +7,7 @@ from fastapi import APIRouter, Depends, HTTPException
 from fastapi.responses import StreamingResponse
 
 import minio_tool
-from app.core.security import admin_auth
+from app.core.security import require_permission
 from app.repositories import version_repository
 from app.schemas.version import VersionIdRequest, VersionProtocolRequest
 from app.services.common_service import is_executable_path
@@ -22,7 +22,7 @@ router = APIRouter(tags=["admin-version"])
 
 
 @router.post("/admin/version/offline-package")
-def admin_offline_package(body: VersionIdRequest, auth=Depends(admin_auth)):
+def admin_offline_package(body: VersionIdRequest, auth=Depends(require_permission("version:view"))):
     version_id = int(body.version_id or 0)
     ver, rows = version_repository.get_version_with_files(version_id)
     if not ver or not rows:
@@ -87,12 +87,12 @@ def admin_offline_package(body: VersionIdRequest, auth=Depends(admin_auth)):
 
 
 @router.get("/admin/version/list")
-def admin_get_version_list(app_id: str, auth=Depends(admin_auth)):
+def admin_get_version_list(app_id: str, auth=Depends(require_permission("version:view"))):
     return {"list": version_repository.list_versions(app_id)}
 
 
 @router.post("/admin/version/set-protocol")
-def admin_set_version_protocol(body: VersionProtocolRequest, auth=Depends(admin_auth)):
+def admin_set_version_protocol(body: VersionProtocolRequest, auth=Depends(require_permission("version:manage"))):
     version_id = int(body.version_id or 0)
     client_protocol = int(body.client_protocol or 0)
     if version_id < 1 or client_protocol < 1:
@@ -104,7 +104,7 @@ def admin_set_version_protocol(body: VersionProtocolRequest, auth=Depends(admin_
 
 
 @router.post("/admin/version/set-latest")
-def admin_set_latest(body: VersionIdRequest, auth=Depends(admin_auth)):
+def admin_set_latest(body: VersionIdRequest, auth=Depends(require_permission("version:manage"))):
     vid = body.version_id
     result = version_repository.set_latest_version(vid)
     if result == "not_found":
@@ -113,7 +113,7 @@ def admin_set_latest(body: VersionIdRequest, auth=Depends(admin_auth)):
 
 
 @router.post("/admin/version/delete")
-def admin_delete_version(body: VersionIdRequest, auth=Depends(admin_auth)):
+def admin_delete_version(body: VersionIdRequest, auth=Depends(require_permission("version:manage"))):
     vid = body.version_id
     v_info = version_repository.get_version_for_delete(vid)
     if not v_info: