feat(views): 为关键视图添加登录验证装饰器

为所有需要用户认证的视图函数添加@login_required装饰器,确保未登录用户无法访问这些功能
This commit is contained in:
2026-01-29 18:04:18 +08:00
parent ae95844177
commit 043c4ff734

View File

@@ -248,6 +248,7 @@ def add_today_reading(request):
return render(request, 'core/add_reading.html', context) return render(request, 'core/add_reading.html', context)
# 编辑今日阅读记录 # 编辑今日阅读记录
@login_required
def edit_today_reading(request, pk): def edit_today_reading(request, pk):
"""编辑今日阅读记录""" """编辑今日阅读记录"""
reading = get_object_or_404(ReadingRecord, pk=pk) reading = get_object_or_404(ReadingRecord, pk=pk)
@@ -264,6 +265,7 @@ def edit_today_reading(request, pk):
return render(request, 'core/edit_reading.html', context) return render(request, 'core/edit_reading.html', context)
# 删除今日阅读记录 # 删除今日阅读记录
@login_required
def delete_today_reading(request, pk): def delete_today_reading(request, pk):
"""删除今日阅读记录""" """删除今日阅读记录"""
reading = get_object_or_404(ReadingRecord, pk=pk) reading = get_object_or_404(ReadingRecord, pk=pk)
@@ -295,6 +297,7 @@ def add_today_insight(request):
return render(request, 'core/add_insight.html', context) return render(request, 'core/add_insight.html', context)
# 编辑今日感悟记录 # 编辑今日感悟记录
@login_required
def edit_today_insight(request, pk): def edit_today_insight(request, pk):
"""编辑今日感悟记录""" """编辑今日感悟记录"""
insight = get_object_or_404(InsightRecord, pk=pk) insight = get_object_or_404(InsightRecord, pk=pk)
@@ -312,6 +315,7 @@ def edit_today_insight(request, pk):
return render(request, 'core/edit_insight.html', context) return render(request, 'core/edit_insight.html', context)
# 删除今日感悟记录 # 删除今日感悟记录
@login_required
def delete_today_insight(request, pk): def delete_today_insight(request, pk):
"""删除今日感悟记录""" """删除今日感悟记录"""
insight = get_object_or_404(InsightRecord, pk=pk) insight = get_object_or_404(InsightRecord, pk=pk)
@@ -324,6 +328,7 @@ def delete_today_insight(request, pk):
return render(request, 'core/delete_insight.html', context) return render(request, 'core/delete_insight.html', context)
# 汇总记录视图 # 汇总记录视图
@login_required
def summaries(request): def summaries(request):
"""汇总记录""" """汇总记录"""
logger.info("用户访问汇总记录页面") logger.info("用户访问汇总记录页面")
@@ -340,6 +345,7 @@ def summaries(request):
return render(request, 'core/summaries.html', context) return render(request, 'core/summaries.html', context)
# 添加汇总记录 # 添加汇总记录
@login_required
def add_summary(request): def add_summary(request):
"""添加汇总记录""" """添加汇总记录"""
family_members = FamilyMember.objects.all() family_members = FamilyMember.objects.all()
@@ -402,6 +408,7 @@ def family_tasks(request):
return render(request, 'core/family_tasks.html', context) return render(request, 'core/family_tasks.html', context)
# 添加家庭事项 # 添加家庭事项
@login_required
def add_family_task(request): def add_family_task(request):
"""添加家庭事项""" """添加家庭事项"""
if request.method == 'POST': if request.method == 'POST':
@@ -417,6 +424,7 @@ def add_family_task(request):
return render(request, 'core/add_family_task.html', context) return render(request, 'core/add_family_task.html', context)
# 编辑家庭事项 # 编辑家庭事项
@login_required
def edit_family_task(request, pk): def edit_family_task(request, pk):
"""编辑家庭事项""" """编辑家庭事项"""
task = get_object_or_404(FamilyTask, pk=pk) task = get_object_or_404(FamilyTask, pk=pk)
@@ -446,6 +454,7 @@ def delete_family_task(request, pk):
return render(request, 'core/delete_family_task.html', context) return render(request, 'core/delete_family_task.html', context)
# 今日计划视图 # 今日计划视图
@login_required
def today_plan(request): def today_plan(request):
"""今日计划""" """今日计划"""
logger.info("用户访问今日计划页面") logger.info("用户访问今日计划页面")
@@ -479,6 +488,7 @@ def add_today_plan(request):
return render(request, 'core/add_today_plan.html', context) return render(request, 'core/add_today_plan.html', context)
# 编辑今日计划 # 编辑今日计划
@login_required
def edit_today_plan(request, pk): def edit_today_plan(request, pk):
"""编辑今日计划""" """编辑今日计划"""
plan = get_object_or_404(TodayPlan, pk=pk) plan = get_object_or_404(TodayPlan, pk=pk)
@@ -496,6 +506,7 @@ def edit_today_plan(request, pk):
return render(request, 'core/edit_today_plan.html', context) return render(request, 'core/edit_today_plan.html', context)
# 删除今日计划 # 删除今日计划
@login_required
def delete_today_plan(request, pk): def delete_today_plan(request, pk):
"""删除今日计划""" """删除今日计划"""
plan = get_object_or_404(TodayPlan, pk=pk) plan = get_object_or_404(TodayPlan, pk=pk)
@@ -578,6 +589,7 @@ def generate_report(request):
return render(request, 'core/report.html', context) return render(request, 'core/report.html', context)
# 查看报告 # 查看报告
@login_required
def view_report(request, date): def view_report(request, date):
"""查看指定日期的报告""" """查看指定日期的报告"""
logger.info(f"用户查看报告: {date}") logger.info(f"用户查看报告: {date}")
@@ -793,6 +805,7 @@ def send_email_view(request):
return redirect('system_settings') return redirect('system_settings')
# 别名保持URL配置一致 # 别名保持URL配置一致
@login_required
def send_email(request): def send_email(request):
"""发送邮件别名""" """发送邮件别名"""
return send_email_view(request) return send_email_view(request)