完善站点运营设置：分路由管理、登录可见评论、邮件模板内联与关闭注册 SSR。

Co-authored-by: Cursor <cursoragent@cursor.com>

backend/service/post.go

@@ -13,10 +13,10 @@ import (
 
 // 帖子操作错误
 var (
-	ErrPostNotFound     = errors.New("帖子不存在")
-	ErrPostForbidden    = errors.New("无权限操作此帖子")
-	ErrPostDeleteMeta   = errors.New("选「其他」时须填写删除理由")
-	ErrPostInvalidType  = errors.New("无效的删除类型")
+	ErrPostNotFound    = errors.New("帖子不存在")
+	ErrPostForbidden   = errors.New("无权限操作此帖子")
+	ErrPostDeleteMeta  = errors.New("选「其他」时须填写删除理由")
+	ErrPostInvalidType = errors.New("无效的删除类型")
 )
 
 // PostService 帖子服务
@@ -65,7 +65,7 @@ func toPostListItems(posts []model.Post) []PostListItem {
 			TypeStatus:    ComputeTypeStatus(pt, p.TypeMeta),
 			ContentAccess: model.NormalizeContentAccess(p.ContentAccess),
 			AccessPoints:  p.AccessPoints,
-			Pinned: p.Pinned, Recommended: p.Recommended, LikeCount: p.LikeCount, ViewCount: p.ViewCount,
+			Pinned:        p.Pinned, Recommended: p.Recommended, LikeCount: p.LikeCount, ViewCount: p.ViewCount,
 			CommentCount: p.CommentCount, Status: p.Status, CreatedAt: p.CreatedAt,
 			Board: p.Board, User: p.User,
 		})
@@ -505,11 +505,11 @@ func buildPostDetail(post *model.Post) *PostDetail {
 	return &PostDetail{
 		ID: post.ID, BoardID: post.BoardID, UserID: post.UserID,
 		Title: post.Title, Content: post.Content, Tags: post.Tags,
-		PostType: model.NormalizePostType(post.PostType),
+		PostType:      model.NormalizePostType(post.PostType),
 		ContentAccess: model.NormalizeContentAccess(post.ContentAccess),
-		AccessPoints: post.AccessPoints, TypeMeta: post.TypeMeta,
+		AccessPoints:  post.AccessPoints, TypeMeta: post.TypeMeta,
 		TypeStatus: ComputeTypeStatus(post.PostType, post.TypeMeta),
-		Pinned: post.Pinned, Recommended: post.Recommended, Status: post.Status,
+		Pinned:     post.Pinned, Recommended: post.Recommended, Status: post.Status,
 		LikeCount: post.LikeCount, ViewCount: post.ViewCount, CommentCount: post.CommentCount,
 		Liked: post.Liked, CreatedAt: post.CreatedAt, UpdatedAt: post.UpdatedAt,
 		Board: post.Board, User: post.User,
@@ -694,6 +694,11 @@ func (s *PostService) UnlockContent(userID, postID uint) (*PostDetail, error) {
 
 // Create 创建帖子。status 由 handler 按角色计算
 func (s *PostService) Create(in CreatePostInput) (*PostDetail, error) {
+	for scope, text := range map[string]string{"title": in.Title, "body": in.Content} {
+		if err := NewOperations(s.db, nil).Filter(scope, text, in.UserID); err != nil {
+			return nil, err
+		}
+	}
 	title := strings.TrimSpace(in.Title)
 	content := strings.TrimSpace(in.Content)
 	if title == "" {
@@ -856,6 +861,11 @@ func validateTypeMeta(postType, meta string) error {
 
 // Update 更新帖子（作者本人，或对该板块有审核权的管理成员）
 func (s *PostService) Update(actor *Actor, postID, userID uint, in UpdatePostInput) (*PostDetail, error) {
+	for scope, text := range map[string]string{"title": in.Title, "body": in.Content} {
+		if err := NewOperations(s.db, nil).Filter(scope, text, userID); err != nil {
+			return nil, err
+		}
+	}
 	var post model.Post
 	if err := s.db.First(&post, postID).Error; err != nil {
 		return nil, ErrPostNotFound