fix: restrict order status to owner

2026-01-09 17:34:18 +08:00
parent 0707d1c5da
commit 2c6f4163c5
3 changed files with 9 additions and 4 deletions
--- a/backend/app/http/v1/routes.gen.go
+++ b/backend/app/http/v1/routes.gen.go
@@ -285,8 +285,9 @@ func (r *Routes) Register(router fiber.Router) {
 	))
 	// Register routes for controller: Transaction
 	r.log.Debugf("Registering route: Get /t/:tenantCode/v1/orders/:id<int>/status -> transaction.Status")
-	router.Get("/t/:tenantCode/v1/orders/:id<int>/status"[len(r.Path()):], DataFunc1(
+	router.Get("/t/:tenantCode/v1/orders/:id<int>/status"[len(r.Path()):], DataFunc2(
 		r.transaction.Status,
+		Local[*models.User]("__ctx_user"),
 		PathParam[int64]("id"),
 	))
 	r.log.Debugf("Registering route: Post /t/:tenantCode/v1/orders -> transaction.Create")