评查文件列表的查询查看、文档列表的查询查看修改删除都添加了user_id去限制用户操作。

app/routes/documents._index.tsx

@@ -122,12 +122,21 @@ const formatFileSize = (bytes: number) => {
 // 处理表单提交和删除等操作
 export const action = async ({ request }: ActionFunctionArgs) => {
   try {
+    // 获取用户会话信息
+    const { getUserSession } = await import("~/api/login/auth.server");
+    const { userInfo } = await getUserSession(request);
+    
+    if (!userInfo?.user_id) {
+      return Response.json({ result: false, message: "用户身份验证失败" }, { status: 401 });
+    }
+    
+    const userId = userInfo.user_id.toString();
     const formData = await request.formData();
     const action = formData.get("_action");
 
     if (action === "delete") {
       const id = formData.get("id") as string;
-      const response = await deleteDocument(id);
+      const response = await deleteDocument(id, userId);
       
       if (response.error) {
         return Response.json({ result: false, message: response.error }, { status: response.status || 500 });
@@ -139,7 +148,7 @@ export const action = async ({ request }: ActionFunctionArgs) => {
       const ids = formData.getAll("ids") as string[];
       
       // 批量删除处理
-      const results = await Promise.all(ids.map(id => deleteDocument(id)));
+      const results = await Promise.all(ids.map(id => deleteDocument(id, userId)));
       const failures = results.filter(r => r.error);
       
       if (failures.length > 0) {
@@ -652,8 +661,15 @@ export default function DocumentsIndex() {
     // 检查audit_status是否为0，如果是则更新为2
     if (auditStatus === 0 || auditStatus === null) {  
       try {
+        // 从loader data中获取用户ID
+        const userId = loaderData.userInfo?.user_id?.toString();
+        if (!userId) {
+          toastService.error('用户身份验证失败');
+          return;
+        }
+        
         // console.log('开始审核',fileId,auditStatus)
-        const response = await updateDocumentAuditStatus(fileId.toString(), 2);
+        const response = await updateDocumentAuditStatus(fileId.toString(), 2, userId);
         if (response.error) {
           console.error('更新文件审核状态失败:', response.error);
           toastService.error('更新文件审核状态失败:' + (response.error || '未知错误'));