Skip to content

应该是权限管理bug #110

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Closed
ileadall42 opened this issue May 16, 2019 · 6 comments
Closed

应该是权限管理bug #110

ileadall42 opened this issue May 16, 2019 · 6 comments

Comments

@ileadall42
Copy link

image
查看菜单时以及授权时,并没有对这两个授权,但是我单独访问这个页面成功了,说明授权没有成功,临时角色是没有这两个页面的访问权限的。

@ileadall42
Copy link
Author

image

@zhangdaiscott
Copy link
Member

了解

@jarvissdiff
Copy link

应该没有使用shiro的权限验证吧

@NoSuchBean
Copy link

这个问题也是我所关心的,有两个方案可以解决(但是我们领导想要第三种方案,所以我只好提了个issue):
方案1: 使用@RequiresPermissions();
方案2:写个拦截器,重写preHandle,在里面获取到当前请求的菜单路径,然后调用SysPermissionMapper.getPermissionsByUsername(username)查出该账户所有的权限,如果权限list.contains(当前请求的路径)则放行,反之不放行;
那么我的问题来了,我们领导不想使用@RequiresPermission(),说是配置太麻烦了,领导也不想使用我实现的方案2,说是自己造轮子怕有坑,不巧的是,领导又翻到了ResourceCheckFilter,这个类,所以他觉得框架已经造好了方案2的轮子,可是我研究了半天,也没有找到框架里面的轮子,请问jeecg团队的各位大大,框架是否已经提供了这个轮子? @zhangdaiscott

@UPMuling
Copy link

UPMuling commented Mar 7, 2020

同求

@zhangdaiscott
Copy link
Member

已经实现权限控制,下个版本发布

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

5 participants