修改鉴权逻辑 --> 管理员获得访问全部权限白名单
This commit is contained in:
@@ -8,19 +8,6 @@ from applications.common.utils.gen_captcha import vieCode
|
||||
from applications.schemas import PowerOutSchema
|
||||
|
||||
|
||||
# 授权路由存入session
|
||||
def add_auth_session():
|
||||
role = current_user.role
|
||||
user_power = []
|
||||
for i in role:
|
||||
if i.enable == 0:
|
||||
continue
|
||||
for p in i.power:
|
||||
if p.enable == 0:
|
||||
continue
|
||||
user_power.append(p.code)
|
||||
session['permissions'] = user_power
|
||||
|
||||
|
||||
# 生成菜单树
|
||||
def make_menu_tree():
|
||||
|
||||
@@ -9,6 +9,9 @@ def authorize(power: str, log: bool = False):
|
||||
@login_required
|
||||
@wraps(func)
|
||||
def wrapper(*args, **kwargs):
|
||||
# 定义管理员的id为1
|
||||
if 1 in session.get('role')[0]:
|
||||
return func(*args, **kwargs)
|
||||
if not power in session.get('permissions'):
|
||||
if log:
|
||||
admin_log(request=request, is_access=False)
|
||||
|
||||
Reference in New Issue
Block a user