新增 admin.ask.read、GET /admin/ask/threads*(AskSessionView)与 admin-h5「问答」页;禁改消息/UGC/真支付。 Co-authored-by: Cursor <cursoragent@cursor.com>
25 lines
597 B
Markdown
25 lines
597 B
Markdown
# Backend Design: ECR-017 AskOperations
|
||
|
||
| ID | BD-2026-017 |
|
||
| Status | Approved |
|
||
| Coding | Loop authorized |
|
||
| Level | L2 |
|
||
| Migration | YES 000019(权限 only) |
|
||
|
||
## Backend Change Boundary
|
||
|
||
```text
|
||
Domain: AskSessionView (read)
|
||
App: AdminHandler → admin.Service → AdminRepo
|
||
API: GET /api/v1/admin/ask/threads[+/:id]
|
||
Permission: admin.ask.read
|
||
Migration: 000019 grant to super_admin
|
||
UI: admin-h5 /ask
|
||
```
|
||
|
||
## Out of boundary
|
||
|
||
Message write/delete · SystemPrompt · Knowledge* · QualityFeedback write · UGC · Payment
|
||
|
||
Rollback: down migration revoke permission + remove routes/UI
|