code: async function updateMulti(ctx) {
    let { Model } = ctx.state;
    let code = Model.api.updateMulti;
    if (code > _alaska.PUBLIC && !ctx.user) {
      //未登录,需要认证
      ctx.status = 401;
      return;
    }
    let filters = await Model.createFiltersByContext(ctx);
  
    if (code === _alaska.OWNER) {
      //只允许用户列出自己的资源
      let { userField } = Model.userField;
      // $Flow 这里可以确认ctx.user存在
      filters[userField] = ctx.user._id;
    }
  
    let body = Object.assign({}, ctx.state.body || ctx.request.body);
  
    // 不允许更新private 字段
    _lodash2.default.forEach(Model.fields, (key, conf) => {
      if (conf.private) {
        delete body[key];
      }
    });
  
    let res = await Model.update(filters, body, { multi: true });
  
    ctx.body = {
      count: res.n,
      updated: res.nModified
    };
  }
docs: 使用Filters同时更新多条记录