评查文件列表的查询查看、文档列表的查询查看修改删除都添加了user_id去限制用户操作。

app/routes/files.upload.tsx

@@ -214,11 +214,21 @@ type LoaderData = {
   documents: Document[];
   documentTypes: DocumentType[];
   mode: string;
+  userInfo?: {
+    user_id?: number;
+    username?: string;
+    nick_name?: string;
+    [key: string]: unknown;
+  } | null;
 };
 
 // 添加 loader 函数
 export async function loader({ request }: LoaderFunctionArgs) {
   try {
+    // 获取用户会话信息
+    const { getUserSession } = await import("~/api/login/auth.server");
+    const { userInfo } = await getUserSession(request);
+    
     // console.log('loader: 开始加载数据...');
     const url = new URL(request.url);
     const mode = url.searchParams.get("mode") || "create";
@@ -240,13 +250,15 @@ export async function loader({ request }: LoaderFunctionArgs) {
     return Response.json({
       mode,
       documents: documentsResponse.data || [],
-      documentTypes: typesResponse.data || []
+      documentTypes: typesResponse.data || [],
+      userInfo // 传递用户信息到客户端
     });
   } catch (error) {
     console.error('loader: 加载数据失败:', error);
     return Response.json({
       documents: [],
-      documentTypes: []
+      documentTypes: [],
+      userInfo: null
     });
   }
 }
@@ -1439,8 +1451,15 @@ export default function FilesUpload() {
       // 检查audit_status是否为0，如果是则更新为2
       if (record.audit_status === 0 || record.audit_status === null) {
         try {
+          // 从loader data中获取用户ID
+          const userId = loaderData.userInfo?.user_id?.toString();
+          if (!userId) {
+            toastService.error('用户身份验证失败');
+            return;
+          }
+          
           // console.log('【调试-handleViewFile】更新文件审核状态，文件ID:', record.id);
-          const response = await updateDocumentAuditStatus(record.id.toString(), 2);
+          const response = await updateDocumentAuditStatus(record.id.toString(), 2, userId);
           if (response.error) {
             console.error('【调试-handleViewFile】更新文件审核状态失败:', response.error);
             toastService.error('更新文件审核状态失败:' + (response.error || '未知错误'));