提交

backend/app/api/public.py

@@ -29,7 +29,11 @@ from app.models.models import SysUser
 from app.crud.user import user_crud
 from app.core.utils import generate_uuid
 from app.core import login_crypto
-from app.services.web_auth_roles import iter_user_menu_perm_codes, resolve_web_role_for_user
+from app.services.web_auth_roles import (
+    iter_user_menu_perm_codes,
+    resolve_web_role_for_user,
+    user_has_active_roles,
+)
 from app.schemas.auth import ProfileUpdateRequest
 from app.crud.user import update_user, change_password
 
@@ -134,6 +138,9 @@ async def web_login(
     if user.status != "1":
         return error_response(403, "账号已被停用，请联系管理员")
 
+    if not user_has_active_roles(db, user.id):
+        return error_response(403, "账号未分配角色，请联系管理员")
+
     web_role = resolve_web_role_for_user(db, user.id)
 
     session_id = generate_uuid()