zcdsj
/
factory
5
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

fix: 管理员返回所有权限代号

This commit is contained in:
caoqianming 2023-05-25 11:19:23 +08:00
parent 71167db85e
commit 515952ef8d
1 changed files with 8 additions and 11 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

19
apps/utils/permission.py
View File

@ -58,17 +58,14 @@ class RbacPermission(BasePermission):
if user_perms_map is None: if user_perms_map is None:
user_perms_map = get_user_perms_map(request.user) user_perms_map = get_user_perms_map(request.user)
if isinstance(user_perms_map, dict): if isinstance(user_perms_map, dict):
if 'superuser' in user_perms_map: perms_map = view.perms_map
return True _method = request._request.method.lower()
else: if perms_map:
perms_map = view.perms_map for key in perms_map:
_method = request._request.method.lower() if key == _method or key == '*':
if perms_map: if perms_map[key] in user_perms_map or perms_map[key] == '*':
for key in perms_map: return True
if key == _method or key == '*': return False
if perms_map[key] in user_perms_map or perms_map[key] == '*':
return True
return False
return False return False