From fea91876f977166bb042d2178c46df80d958e969 Mon Sep 17 00:00:00 2001 From: xiaoxia Date: Sat, 1 Aug 2026 16:44:46 +0800 Subject: [PATCH] =?UTF-8?q?fix(#1197):=20AI=20Code=20Review=E7=AC=AC3?= =?UTF-8?q?=E8=BD=AE=E4=BF=AE=E5=A4=8D?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit 1. 权限校验str()转换，避免UUID/str类型不匹配 2. 配置写回注释说明，明确拷贝-修改-写回流程完整 --- apps/api/app/api/routes/generation_preview.py | 6 +++--- apps/worker/worker_app/tasks/generation.py | 1 + 2 files changed, 4 insertions(+), 3 deletions(-) diff --git a/apps/api/app/api/routes/generation_preview.py b/apps/api/app/api/routes/generation_preview.py index bd843f31c..5e9414a70 100755 --- a/apps/api/app/api/routes/generation_preview.py +++ b/apps/api/app/api/routes/generation_preview.py @@ -238,9 +238,9 @@ def get_preview_generation_task( if task is None: raise HTTPException(status_code=404, detail=f"预览任务 {task_id} 不存在") - # 权限校验：任务必须属于当前用户 - task_user_id = getattr(task, "created_by_user_id", "") or "" - if not task_user_id or task_user_id != authenticated_user.user.id: + # 权限校验：任务必须属于当前用户（统一转 str 比较，避免 UUID/str 类型差异） + task_user_id = str(getattr(task, "created_by_user_id", "") or "") + if not task_user_id or task_user_id != str(authenticated_user.user.id): raise HTTPException(status_code=403, detail="无权访问该任务") # 校验是否为预览任务 diff --git a/apps/worker/worker_app/tasks/generation.py b/apps/worker/worker_app/tasks/generation.py index e2eb61897..de1f94075 100755 --- a/apps/worker/worker_app/tasks/generation.py +++ b/apps/worker/worker_app/tasks/generation.py @@ -1074,6 +1074,7 @@ def _render_video( export_cfg["resolution"] = resolution elif not export_cfg.get("resolution"): export_cfg["resolution"] = f"{OUTPUT_WIDTH}x{OUTPUT_HEIGHT}" + # 将修改后的配置写回 virtual_plan（拷贝后的副本，不影响原始数据源） plan_cfg["export"] = export_cfg virtual_plan.config = plan_cfg