feat: added user profile model & api & admin, it uses by found user with merchant

2025-11-24 12:58:29 +08:00
parent 0e77496d9a
commit 506b0cb448
11 changed files with 588 additions and 4 deletions
--- a/api_man/views.py
+++ b/api_man/views.py
@@ -99,3 +99,15 @@ class DeviceInfoViewSet(BaseViewSet):
 class VehicleTransportRecordViewSet(BaseViewSet):
    queryset = serializers.basic_models.VehicleTransportRecord.objects
    serializer_class = serializers.VehicleTransportRecordSerializer
+
+
+class UserProfileViewSet(BaseViewSet):
+    queryset = serializers.basic_models.UserProfile.objects
+    serializer_class = serializers.UserProfileSerializer
+
+    def filter_queryset(self, queryset):
+        try:
+            merchant = self.request.user.employee.merchant
+            return super().filter_queryset(queryset).filter(merchant=merchant)
+        except AttributeError:
+            raise PermissionDenied("无权限访问该对象")