go-admin

mirror of https://github.com/go-admin-team/go-admin.git synced 2026-09-22 02:27:57 +00:00

Files

T

zhangwenjian bd5e83d464 fix🐛: validate data scope on the role DTOs

Nothing checked what went into sys_role.data_scope, so creating a role without
a dataScope stored an empty string - the value that used to be indistinguishable
from "see everything".

All three DTOs that write the column are validated, not just the insert path:
they target the same column, and guarding one entrance while leaving two open
would not be a guard.

Claude-Session: https://claude.ai/code/session_01HPTAw8b8tAdFNFn8rKdPYx

2026-09-04 17:24:41 +08:00

dto

fix🐛: validate data scope on the role DTOs

2026-09-04 17:24:41 +08:00

sys_api_permission_test.go

fix🐛: refuse an out-of-scope API update with the permission message

2026-09-01 14:17:20 +08:00

sys_api.go

fix🐛: refuse an out-of-scope API update with the permission message

2026-09-01 14:17:20 +08:00

sys_config.go

chore🔧: move to go-admin-core v2