添加权限 关联

app/api/job_agent_chat.py

@@ -1,7 +1,8 @@
 """求职助手 Agent 对话接口"""
 
-from fastapi import APIRouter
+from fastapi import APIRouter, Depends
 
+from app.core.auth import func_permission
 from app.core.context import RequestContext
 from app.core.database import get_db
 from app.schemas.job_agent_chat import JobAgentChatParam, OptimizeResumeParam
@@ -25,7 +26,7 @@ async def chat(param: JobAgentChatParam):
 
 
 @router.post("/optimize-resume", summary="针对岗位优化简历")
-async def optimize_resume(param: OptimizeResumeParam):
+async def optimize_resume(param: OptimizeResumeParam, _: None = Depends(func_permission("resume_custom"))):
     """根据目标岗位，AI并发优化简历（summary + 5张子表经历），存Redis并返回"""
     user_id = RequestContext.user_id.get()
     async for session in get_db():

app/api/resume_diagnose.py

@@ -1,9 +1,10 @@
 """简历诊断接口"""
 
-from fastapi import APIRouter
+from fastapi import APIRouter, Depends
 from pydantic import BaseModel, Field
 
 from app.ai.resume_diagnoser.diagnoser import diagnose_all, generate_summary, polish_content
+from app.core.auth import func_permission
 from app.core.context import RequestContext
 from app.core.database import get_db
 from app.services.resume_diagnose_service import ResumeDiagnoseService, aggregate_results
@@ -16,7 +17,7 @@ class DiagnoseParam(BaseModel):
 
 
 @router.post("", summary="触发简历诊断")
-async def diagnose_resume(param: DiagnoseParam):
+async def diagnose_resume(param: DiagnoseParam, _: None = Depends(func_permission("resume_diag"))):
     """触发简历AI诊断，返回报告ID"""
     user_id = RequestContext.user_id.get()
 

app/api/skill_gap.py

@@ -1,7 +1,8 @@
 """岗位简历技能差距分析 + 定制简历接口"""
 
-from fastapi import APIRouter
+from fastapi import APIRouter, Depends
 
+from app.core.auth import func_permission
 from app.core.context import RequestContext
 from app.core.database import get_db
 from app.schemas.skill_gap import SkillGapParam, CustomizeResumeParam, AiEditParam
@@ -21,7 +22,7 @@ async def skill_gap(param: SkillGapParam):
 
 
 @router.post("/customize-resume", summary="生成定制简历")
-async def generate_customize_resume(param: CustomizeResumeParam):
+async def generate_customize_resume(param: CustomizeResumeParam, _: None = Depends(func_permission("resume_custom"))):
     """根据差距分析结果，AI 生成定制简历"""
     user_id = RequestContext.user_id.get()
     async for session in get_db():