From db955d59eac9bcc560b1f3440529f4fdae32ebb5 Mon Sep 17 00:00:00 2001
From: "2569718930@qq.com" <2569718930@qq.com>
Date: Wed, 20 May 2026 20:28:54 +0800
Subject: [PATCH] =?UTF-8?q?=E4=BF=AE=E5=A4=8D=E7=AE=A1=E7=90=86=E5=91=98?=
 =?UTF-8?q?=E6=89=8B=E5=8A=A8=E5=BC=80=E9=80=9A=E5=A4=B1=E8=B4=A5=EF=BC=9A?=
 =?UTF-8?q?=E7=A7=BB=E9=99=A4=20ops=20=E5=90=8E=E5=8F=B0=E7=9A=84=E8=AE=A2?=
 =?UTF-8?q?=E9=98=85=E8=A6=81=E6=B1=82=E6=A3=80=E6=9F=A5?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 web/services/ops_api.py | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/web/services/ops_api.py b/web/services/ops_api.py
index 593ee4ff..f6eb413b 100644
--- a/web/services/ops_api.py
+++ b/web/services/ops_api.py
@@ -12,7 +12,8 @@ import web.routes as legacy_routes
 
 
 def _require_ops(request: Request) -> Dict[str, Any] | None:
-    legacy_routes._assert_entitlement(request)
+    # Ops admins are authenticated via Supabase identity + email whitelist.
+    # They do NOT need an active Pro subscription to manage the system.
     return legacy_routes._require_ops_admin(request)