允许引导密钥补授权迁移操作员

正确 bootstrap secret 可补充数据库迁移 operator。保留无 bootstrap 时必须由现有 operator 授权的约束。
2026-07-01 16:03:23 +08:00
parent c8efdbcfc9
commit d167c1fa71
1 changed files with 3 additions and 2 deletions
@@ -2419,9 +2419,10 @@ fn authorize_database_migration_operator_tx(
    note: String,
 ) -> Result<(), String> {
    let has_operator = ctx.db.database_migration_operator().iter().next().is_some();
-    if has_operator {
+    let has_valid_bootstrap_secret = require_migration_bootstrap_secret(bootstrap_secret).is_ok();
+    if has_operator && !has_valid_bootstrap_secret {
        require_migration_operator(ctx, caller)?;
-    } else {
+    } else if !has_operator {
        require_migration_bootstrap_secret(bootstrap_secret)?;
    }