新增 admin.ask.read、GET /admin/ask/threads*(AskSessionView)与 admin-h5「问答」页;禁改消息/UGC/真支付。 Co-authored-by: Cursor <cursoragent@cursor.com>
597 B
597 B
Backend Design: ECR-017 AskOperations
| ID | BD-2026-017 | | Status | Approved | | Coding | Loop authorized | | Level | L2 | | Migration | YES 000019(权限 only) |
Backend Change Boundary
Domain: AskSessionView (read)
App: AdminHandler → admin.Service → AdminRepo
API: GET /api/v1/admin/ask/threads[+/:id]
Permission: admin.ask.read
Migration: 000019 grant to super_admin
UI: admin-h5 /ask
Out of boundary
Message write/delete · SystemPrompt · Knowledge* · QualityFeedback write · UGC · Payment
Rollback: down migration revoke permission + remove routes/UI