From 6dd9462ca6b8b3f68683c306f97ebb2985d24942 Mon Sep 17 00:00:00 2001
From: zk <sim18502043706@163.com>
Date: Thu, 14 May 2026 21:20:59 +0800
Subject: [PATCH] =?UTF-8?q?=E6=B7=BB=E5=8A=A0=E6=9D=83=E9=99=90=20?=
 =?UTF-8?q?=E5=85=B3=E8=81=94?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 app/api/job_agent_chat.py  | 5 +++--
 app/api/resume_diagnose.py | 5 +++--
 app/api/skill_gap.py       | 5 +++--
 3 files changed, 9 insertions(+), 6 deletions(-)

diff --git a/app/api/job_agent_chat.py b/app/api/job_agent_chat.py
index 64f3157..6788ec5 100644
--- a/app/api/job_agent_chat.py
+++ b/app/api/job_agent_chat.py
@@ -1,7 +1,8 @@
 """求职助手 Agent 对话接口"""
 
-from fastapi import APIRouter
+from fastapi import APIRouter, Depends
 
+from app.core.auth import func_permission
 from app.core.context import RequestContext
 from app.core.database import get_db
 from app.schemas.job_agent_chat import JobAgentChatParam, OptimizeResumeParam
@@ -25,7 +26,7 @@ async def chat(param: JobAgentChatParam):
 
 
 @router.post("/optimize-resume", summary="针对岗位优化简历")
-async def optimize_resume(param: OptimizeResumeParam):
+async def optimize_resume(param: OptimizeResumeParam, _: None = Depends(func_permission("resume_custom"))):
     """根据目标岗位，AI并发优化简历（summary + 5张子表经历），存Redis并返回"""
     user_id = RequestContext.user_id.get()
     async for session in get_db():
diff --git a/app/api/resume_diagnose.py b/app/api/resume_diagnose.py
index 64a5b3a..6dc04d7 100644
--- a/app/api/resume_diagnose.py
+++ b/app/api/resume_diagnose.py
@@ -1,9 +1,10 @@
 """简历诊断接口"""
 
-from fastapi import APIRouter
+from fastapi import APIRouter, Depends
 from pydantic import BaseModel, Field
 
 from app.ai.resume_diagnoser.diagnoser import diagnose_all, generate_summary, polish_content
+from app.core.auth import func_permission
 from app.core.context import RequestContext
 from app.core.database import get_db
 from app.services.resume_diagnose_service import ResumeDiagnoseService, aggregate_results
@@ -16,7 +17,7 @@ class DiagnoseParam(BaseModel):
 
 
 @router.post("", summary="触发简历诊断")
-async def diagnose_resume(param: DiagnoseParam):
+async def diagnose_resume(param: DiagnoseParam, _: None = Depends(func_permission("resume_diag"))):
     """触发简历AI诊断，返回报告ID"""
     user_id = RequestContext.user_id.get()
 
diff --git a/app/api/skill_gap.py b/app/api/skill_gap.py
index 47683a2..e4a5456 100644
--- a/app/api/skill_gap.py
+++ b/app/api/skill_gap.py
@@ -1,7 +1,8 @@
 """岗位简历技能差距分析 + 定制简历接口"""
 
-from fastapi import APIRouter
+from fastapi import APIRouter, Depends
 
+from app.core.auth import func_permission
 from app.core.context import RequestContext
 from app.core.database import get_db
 from app.schemas.skill_gap import SkillGapParam, CustomizeResumeParam, AiEditParam
@@ -21,7 +22,7 @@ async def skill_gap(param: SkillGapParam):
 
 
 @router.post("/customize-resume", summary="生成定制简历")
-async def generate_customize_resume(param: CustomizeResumeParam):
+async def generate_customize_resume(param: CustomizeResumeParam, _: None = Depends(func_permission("resume_custom"))):
     """根据差距分析结果，AI 生成定制简历"""
     user_id = RequestContext.user_id.get()
     async for session in get_db():