From 5f09ef3705b7476d992c93593d71feb05cba14ec Mon Sep 17 00:00:00 2001
From: jlj <3042504846@qq.com>
Date: Tue, 3 Jun 2025 15:42:45 +0800
Subject: [PATCH] =?UTF-8?q?=E7=AE=A1=E7=90=86=E5=91=98=E6=B7=BB=E5=8A=A0?=
 =?UTF-8?q?=E5=85=AC=E6=9C=89=E8=BE=BE=E4=BA=BA?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 apps/daren_detail/views.py | 11 ++++++++++-
 1 file changed, 10 insertions(+), 1 deletion(-)

diff --git a/apps/daren_detail/views.py b/apps/daren_detail/views.py
index 86cac9f..f075735 100644
--- a/apps/daren_detail/views.py
+++ b/apps/daren_detail/views.py
@@ -2152,11 +2152,20 @@ def get_public_creators(request):
 @csrf_exempt
 @require_http_methods(["POST"])
 def add_to_public_pool(request):
-    """将达人添加到公有达人库"""
+    """将达人添加到公有达人库（仅管理员可操作）"""
     try:
         from .models import PublicCreatorPool, CreatorProfile
         import json
 
+        # 检查当前用户是否有管理员权限
+        current_user = request.user
+        if not current_user.is_staff and not current_user.is_superuser:
+            return JsonResponse({
+                'code': 403,
+                'message': '权限不足，只有管理员可以添加/更新公有库达人',
+                'data': None
+            }, json_dumps_params={'ensure_ascii': False})
+
         data = json.loads(request.body)
 
         # 获取必要参数