public/go-admin
1
0
Fork 0
mirror of https://github.com/go-admin-team/go-admin.git synced 2026-10-14 09:16:28 +00:00
Code Issues Packages Projects Releases Wiki Activity

fix🔒: add AuthCheckRole to /set-config

Browse Source 
The group only had JWT, so any logged-in user could read and overwrite the system settings regardless of their own permissions.
This commit is contained in:
zhangwenjian
2026-10-08 20:00:15 +08:00
parent 26a0a8d1af
commit faed5d3426
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
app/admin/router/sys_config.go
+1 -1
View File
@@ -34,7 +34,7 @@ func registerSysConfigRouter(v1 *gin.RouterGroup, authMiddleware *jwt.GinJWTMidd
r2.GET("", api.Get2SysApp)
}
r3 := v1.Group("/set-config").Use(authMiddleware.MiddlewareFunc())
r3 := v1.Group("/set-config").Use(authMiddleware.MiddlewareFunc()).Use(middleware.AuthCheckRole())
{
r3.PUT("", api.Update2Set)
r3.GET("", api.Get2Set)