YG-Soft/X-Financial
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

feat(expenses): secure timeline and draft events

Browse Source
This commit is contained in:
caoxiaozhu
2026-07-14 00:07:07 +08:00
parent 22669a9071
commit 1347366b95
14 changed files with 1044 additions and 59 deletions
Download Patch File Download Diff File Expand all files Collapse all files

26
server/src/app/api/v1/endpoints/reimbursements.py
View File

@@ -104,15 +104,21 @@ def _build_application_preview_action_context(
context_json.setdefault("entry_source", "workbench_ai_inline")
context_json.setdefault("document_type", "expense_application")
context_json.setdefault("application_stage", "expense_application")
context_json.setdefault("role_codes", current_user.role_codes)
context_json.setdefault("is_admin", current_user.is_admin)
context_json.setdefault("username", current_user.username)
context_json.setdefault("name", current_user.name)
context_json.setdefault("department_name", current_user.department_name)
context_json.setdefault("position", current_user.position)
context_json.setdefault("grade", current_user.grade)
context_json.setdefault("employee_no", current_user.employee_no)
context_json.setdefault("manager_name", current_user.manager_name)
# 身份与权限字段只能来自服务端会话，不能保留请求体中的同名值。
context_json.update(
{
"tenant_id": current_user.tenant_id,
"role_codes": current_user.role_codes,
"is_admin": current_user.is_admin,
"username": current_user.username,
"name": current_user.name,
"department_name": current_user.department_name,
"position": current_user.position,
"grade": current_user.grade,
"employee_no": current_user.employee_no,
"manager_name": current_user.manager_name,
}
)
return context_json
@@ -134,7 +140,7 @@ def run_application_preview_action(
run_id = f"application-preview-action:{payload.conversation_id or current_user.username}"
request = UserAgentRequest(
run_id=run_id,
user_id=payload.user_id or current_user.username or current_user.name,
user_id=current_user.username or current_user.name,
message=payload.message,
ontology=OntologyParseResult(
scenario="expense",