zhangwenjian e347854919 fix🐛: check the role on the code generator's routes ...

Every generator route was reachable by any account that could log in:
the /gen and /db routes were in CasbinExclude, and the /sys/tables
routes were mounted without AuthCheckRole. Any user could read and
change any table's configuration and, in dev mode, generate files
from it.

All thirteen now go through AuthCheckRole. admin is let through as
before; another role needs the generator's menus, whose APIs the
previous commit binds and grants. The captcha, registered alongside
them, stays public.

2026-09-27 19:43:32 +08:00

..

admin

Merge pull request #944 from amiaogo/fix/opera-log-utf8-truncate

2026-09-26 14:32:22 +08:00

demo

fix🐛: build the shared jwt middleware instance once in InitMiddleware

2026-09-05 10:26:54 +08:00

jobs

Merge pull request #947 from go-admin-team/fix/915-scheduler-lease

2026-09-22 22:57:21 +08:00

other

fix🐛: check the role on the code generator's routes

2026-09-27 19:43:32 +08:00