权限限制

apps/rpm/views.py

@@ -44,7 +44,7 @@ class RpartyViewSet(CustomModelViewSet):
 
 
 class RfileViewSet(ListModelMixin, CustomGenericViewSet):
-    perms_map = {'get': 'rparty_file:view'}
+    perms_map = {'get': '*'}
     queryset = Rfile.objects.all()
     list_serializer_class = RfileListSerializer
 

apps/third/views_d.py

@@ -62,7 +62,7 @@ class BltViewSet(CustomGenericViewSet):
         ret['count_visitor'] = qs.filter(employee__type='visitor').count()
         return Response(ret)
 
-    @action(methods=['post'], detail=False, perms_map={'post': '*'},
+    @action(methods=['post'], detail=False, perms_map={'post': 'blt.all'},
             serializer_class=BltQuerySerializer)
     def all(self, request):
         """全部在线标签列表信息

apps/wf/urls.py

@@ -7,12 +7,12 @@ API_BASE_URL = 'api/wf/'
 HTML_BASE_URL = 'wf/'
 
 router = DefaultRouter()
-router.register('workflow', WorkflowViewSet, basename='wf')
-router.register('state', StateViewSet, basename='wf_state')
-router.register('transition', TransitionViewSet, basename='wf_transitions')
-router.register('customfield', CustomFieldViewSet, basename='wf_customfield')
-router.register('ticket', TicketViewSet, basename='wf_ticket')
-router.register('ticketflow', TicketFlowViewSet, basename='wf_ticketflow')
+router.register('workflow', WorkflowViewSet, basename='workflow')
+router.register('state', StateViewSet, basename='state')
+router.register('transition', TransitionViewSet, basename='transition')
+router.register('customfield', CustomFieldViewSet, basename='customfield')
+router.register('ticket', TicketViewSet, basename='ticket')
+router.register('ticketflow', TicketFlowViewSet, basename='ticketflow')
 urlpatterns = [
     path(API_BASE_URL, include(router.urls)),
     path(API_BASE_URL + 'workflow/<str:key>/init_key/', WorkflowKeyInitView.as_view())