修改鉴权逻辑 --> 管理员获得访问全部权限白名单

This commit is contained in:
不胜舟
2022-12-28 01:38:40 +08:00
parent b2207e277f
commit 83964bfa78
10 changed files with 48 additions and 37 deletions
+10 -3
View File
@@ -1,4 +1,4 @@
from flask import Blueprint, render_template, request
from flask import Blueprint, render_template, request, session
from flask_login import login_required, current_user
from sqlalchemy import desc
@@ -16,14 +16,14 @@ admin_user = Blueprint('adminUser', __name__, url_prefix='/admin/user')
# 用户管理
@admin_user.get('/')
@authorize("admin:user:main", log=True)
@authorize("admin:user:main")
def main():
return render_template('admin/user/main.html')
# 用户分页查询
@admin_user.get('/data')
@authorize("admin:user:main", log=True)
@authorize("admin:user:main")
def data():
# 获取请求参数
real_name = str_escape(request.args.get('realName', type=str))
@@ -238,3 +238,10 @@ def batch_remove():
res = User.query.filter_by(id=id).delete()
db.session.commit()
return success_api(msg="批量删除成功")
@admin_user.get("test")
def test():
print(session)
print(session.get('role')[0])
return '6'