zhangwenjian b7e9a79225 fix🐛: refuse an out-of-scope API update with the permission message ...

The previous commit added a data-permission scope to SysApi.Update and
returned early on db.Error, which left the RowsAffected check below it
unreachable: First reports a row the scope excluded as ErrRecordNotFound,
so the caller got "record not found" where the code meant to say
"无权更新该数据".

Map that one error to the permission message and drop the check it made
dead. The two cases - the row does not exist, and the row exists but is
not yours - have to look the same from outside, and now do.

Found by Copilot's review of #889.

2026-09-01 14:17:20 +08:00

..

apis

fix🔒: stop logging the captcha answer

2026-08-28 19:42:21 +08:00

models

fix🐛: stop re-hashing a password that is already hashed

2026-09-01 11:35:33 +08:00

router

chore🔧: move to go-admin-core v2

2026-08-23 13:26:46 +08:00

service

fix🐛: refuse an out-of-scope API update with the permission message

2026-09-01 14:17:20 +08:00