修改鉴权逻辑 --> 管理员获得访问全部权限白名单

This commit is contained in:
不胜舟
2022-12-28 01:38:40 +08:00
parent b2207e277f
commit 83964bfa78
10 changed files with 48 additions and 37 deletions
-13
View File
@@ -8,19 +8,6 @@ from applications.common.utils.gen_captcha import vieCode
from applications.schemas import PowerOutSchema
# 授权路由存入session
def add_auth_session():
role = current_user.role
user_power = []
for i in role:
if i.enable == 0:
continue
for p in i.power:
if p.enable == 0:
continue
user_power.append(p.code)
session['permissions'] = user_power
# 生成菜单树
def make_menu_tree():
+3
View File
@@ -9,6 +9,9 @@ def authorize(power: str, log: bool = False):
@login_required
@wraps(func)
def wrapper(*args, **kwargs):
# 定义管理员的id为1
if 1 in session.get('role')[0]:
return func(*args, **kwargs)
if not power in session.get('permissions'):
if log:
admin_log(request=request, is_access=False)