feat(views): 为关键视图添加登录验证装饰器
为所有需要用户认证的视图函数添加@login_required装饰器,确保未登录用户无法访问这些功能
This commit is contained in:
@@ -248,6 +248,7 @@ def add_today_reading(request):
|
||||
return render(request, 'core/add_reading.html', context)
|
||||
|
||||
# 编辑今日阅读记录
|
||||
@login_required
|
||||
def edit_today_reading(request, pk):
|
||||
"""编辑今日阅读记录"""
|
||||
reading = get_object_or_404(ReadingRecord, pk=pk)
|
||||
@@ -264,6 +265,7 @@ def edit_today_reading(request, pk):
|
||||
return render(request, 'core/edit_reading.html', context)
|
||||
|
||||
# 删除今日阅读记录
|
||||
@login_required
|
||||
def delete_today_reading(request, pk):
|
||||
"""删除今日阅读记录"""
|
||||
reading = get_object_or_404(ReadingRecord, pk=pk)
|
||||
@@ -295,6 +297,7 @@ def add_today_insight(request):
|
||||
return render(request, 'core/add_insight.html', context)
|
||||
|
||||
# 编辑今日感悟记录
|
||||
@login_required
|
||||
def edit_today_insight(request, pk):
|
||||
"""编辑今日感悟记录"""
|
||||
insight = get_object_or_404(InsightRecord, pk=pk)
|
||||
@@ -312,6 +315,7 @@ def edit_today_insight(request, pk):
|
||||
return render(request, 'core/edit_insight.html', context)
|
||||
|
||||
# 删除今日感悟记录
|
||||
@login_required
|
||||
def delete_today_insight(request, pk):
|
||||
"""删除今日感悟记录"""
|
||||
insight = get_object_or_404(InsightRecord, pk=pk)
|
||||
@@ -324,6 +328,7 @@ def delete_today_insight(request, pk):
|
||||
return render(request, 'core/delete_insight.html', context)
|
||||
|
||||
# 汇总记录视图
|
||||
@login_required
|
||||
def summaries(request):
|
||||
"""汇总记录"""
|
||||
logger.info("用户访问汇总记录页面")
|
||||
@@ -340,6 +345,7 @@ def summaries(request):
|
||||
return render(request, 'core/summaries.html', context)
|
||||
|
||||
# 添加汇总记录
|
||||
@login_required
|
||||
def add_summary(request):
|
||||
"""添加汇总记录"""
|
||||
family_members = FamilyMember.objects.all()
|
||||
@@ -402,6 +408,7 @@ def family_tasks(request):
|
||||
return render(request, 'core/family_tasks.html', context)
|
||||
|
||||
# 添加家庭事项
|
||||
@login_required
|
||||
def add_family_task(request):
|
||||
"""添加家庭事项"""
|
||||
if request.method == 'POST':
|
||||
@@ -417,6 +424,7 @@ def add_family_task(request):
|
||||
return render(request, 'core/add_family_task.html', context)
|
||||
|
||||
# 编辑家庭事项
|
||||
@login_required
|
||||
def edit_family_task(request, pk):
|
||||
"""编辑家庭事项"""
|
||||
task = get_object_or_404(FamilyTask, pk=pk)
|
||||
@@ -446,6 +454,7 @@ def delete_family_task(request, pk):
|
||||
return render(request, 'core/delete_family_task.html', context)
|
||||
|
||||
# 今日计划视图
|
||||
@login_required
|
||||
def today_plan(request):
|
||||
"""今日计划"""
|
||||
logger.info("用户访问今日计划页面")
|
||||
@@ -479,6 +488,7 @@ def add_today_plan(request):
|
||||
return render(request, 'core/add_today_plan.html', context)
|
||||
|
||||
# 编辑今日计划
|
||||
@login_required
|
||||
def edit_today_plan(request, pk):
|
||||
"""编辑今日计划"""
|
||||
plan = get_object_or_404(TodayPlan, pk=pk)
|
||||
@@ -496,6 +506,7 @@ def edit_today_plan(request, pk):
|
||||
return render(request, 'core/edit_today_plan.html', context)
|
||||
|
||||
# 删除今日计划
|
||||
@login_required
|
||||
def delete_today_plan(request, pk):
|
||||
"""删除今日计划"""
|
||||
plan = get_object_or_404(TodayPlan, pk=pk)
|
||||
@@ -578,6 +589,7 @@ def generate_report(request):
|
||||
return render(request, 'core/report.html', context)
|
||||
|
||||
# 查看报告
|
||||
@login_required
|
||||
def view_report(request, date):
|
||||
"""查看指定日期的报告"""
|
||||
logger.info(f"用户查看报告: {date}")
|
||||
@@ -793,6 +805,7 @@ def send_email_view(request):
|
||||
return redirect('system_settings')
|
||||
|
||||
# 别名,保持URL配置一致
|
||||
@login_required
|
||||
def send_email(request):
|
||||
"""发送邮件别名"""
|
||||
return send_email_view(request)
|
||||
|
||||
Reference in New Issue
Block a user