From 043c4ff734cdc8af7bbb32591d574f434e43a0b6 Mon Sep 17 00:00:00 2001
From: xiaji <rembme@163.com>
Date: Thu, 29 Jan 2026 18:04:18 +0800
Subject: [PATCH] =?UTF-8?q?feat(views):=20=E4=B8=BA=E5=85=B3=E9=94=AE?=
 =?UTF-8?q?=E8=A7=86=E5=9B=BE=E6=B7=BB=E5=8A=A0=E7=99=BB=E5=BD=95=E9=AA=8C?=
 =?UTF-8?q?=E8=AF=81=E8=A3=85=E9=A5=B0=E5=99=A8?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

为所有需要用户认证的视图函数添加@login_required装饰器，确保未登录用户无法访问这些功能
---
 core/views.py | 13 +++++++++++++
 1 file changed, 13 insertions(+)

diff --git a/core/views.py b/core/views.py
index c639b30..246861a 100644
--- a/core/views.py
+++ b/core/views.py
@@ -248,6 +248,7 @@ def add_today_reading(request):
     return render(request, 'core/add_reading.html', context)
 
 # 编辑今日阅读记录
+@login_required
 def edit_today_reading(request, pk):
     """编辑今日阅读记录"""
     reading = get_object_or_404(ReadingRecord, pk=pk)
@@ -264,6 +265,7 @@ def edit_today_reading(request, pk):
     return render(request, 'core/edit_reading.html', context)
 
 # 删除今日阅读记录
+@login_required
 def delete_today_reading(request, pk):
     """删除今日阅读记录"""
     reading = get_object_or_404(ReadingRecord, pk=pk)
@@ -295,6 +297,7 @@ def add_today_insight(request):
     return render(request, 'core/add_insight.html', context)
 
 # 编辑今日感悟记录
+@login_required
 def edit_today_insight(request, pk):
     """编辑今日感悟记录"""
     insight = get_object_or_404(InsightRecord, pk=pk)
@@ -312,6 +315,7 @@ def edit_today_insight(request, pk):
     return render(request, 'core/edit_insight.html', context)
 
 # 删除今日感悟记录
+@login_required
 def delete_today_insight(request, pk):
     """删除今日感悟记录"""
     insight = get_object_or_404(InsightRecord, pk=pk)
@@ -324,6 +328,7 @@ def delete_today_insight(request, pk):
     return render(request, 'core/delete_insight.html', context)
 
 # 汇总记录视图
+@login_required
 def summaries(request):
     """汇总记录"""
     logger.info("用户访问汇总记录页面")
@@ -340,6 +345,7 @@ def summaries(request):
     return render(request, 'core/summaries.html', context)
 
 # 添加汇总记录
+@login_required
 def add_summary(request):
     """添加汇总记录"""
     family_members = FamilyMember.objects.all()
@@ -402,6 +408,7 @@ def family_tasks(request):
     return render(request, 'core/family_tasks.html', context)
 
 # 添加家庭事项
+@login_required
 def add_family_task(request):
     """添加家庭事项"""
     if request.method == 'POST':
@@ -417,6 +424,7 @@ def add_family_task(request):
     return render(request, 'core/add_family_task.html', context)
 
 # 编辑家庭事项
+@login_required
 def edit_family_task(request, pk):
     """编辑家庭事项"""
     task = get_object_or_404(FamilyTask, pk=pk)
@@ -446,6 +454,7 @@ def delete_family_task(request, pk):
     return render(request, 'core/delete_family_task.html', context)
 
 # 今日计划视图
+@login_required
 def today_plan(request):
     """今日计划"""
     logger.info("用户访问今日计划页面")
@@ -479,6 +488,7 @@ def add_today_plan(request):
     return render(request, 'core/add_today_plan.html', context)
 
 # 编辑今日计划
+@login_required
 def edit_today_plan(request, pk):
     """编辑今日计划"""
     plan = get_object_or_404(TodayPlan, pk=pk)
@@ -496,6 +506,7 @@ def edit_today_plan(request, pk):
     return render(request, 'core/edit_today_plan.html', context)
 
 # 删除今日计划
+@login_required
 def delete_today_plan(request, pk):
     """删除今日计划"""
     plan = get_object_or_404(TodayPlan, pk=pk)
@@ -578,6 +589,7 @@ def generate_report(request):
     return render(request, 'core/report.html', context)
 
 # 查看报告
+@login_required
 def view_report(request, date):
     """查看指定日期的报告"""
     logger.info(f"用户查看报告: {date}")
@@ -793,6 +805,7 @@ def send_email_view(request):
         return redirect('system_settings')
 
 # 别名，保持URL配置一致
+@login_required
 def send_email(request):
     """发送邮件别名"""
     return send_email_view(request)