mirror
/
fastadmin
mirror of https://gitee.com/karson/fastadmin.git
1
0
Fork 0
Code Issues Releases Wiki Activity

解决角色组跨权限查看编辑的问题，修正角色组移动时不能为节点的子节点

pull/158/head
cxb 2019-11-28 18:17:18 +08:00
parent 2b60921cf3
commit e216bd7751
2 changed files with 12 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

13
application/admin/controller/auth/Group.php
View File

@ -95,7 +95,7 @@ class Group extends Backend
$params = $this->request->post("row/a", [], 'strip_tags'); $params = $this->request->post("row/a", [], 'strip_tags');
$params['rules'] = explode(',', $params['rules']); $params['rules'] = explode(',', $params['rules']);
if (!in_array($params['pid'], $this->childrenGroupIds)) { if (!in_array($params['pid'], $this->childrenGroupIds)) {
$this->error(__('The parent group can not be its own child')); $this->error(__('The parent group exceeds permission limit'));
} }
$parentmodel = model("AuthGroup")->get($params['pid']); $parentmodel = model("AuthGroup")->get($params['pid']);
if (!$parentmodel) { if (!$parentmodel) {
@ -125,6 +125,9 @@ class Group extends Backend
*/ */
public function edit($ids = null) public function edit($ids = null)
{ {
if (!in_array($ids, $this->childrenGroupIds)) {
$this->error(__('You have no permission'));
}
$row = $this->model->get(['id' => $ids]); $row = $this->model->get(['id' => $ids]);
if (!$row) { if (!$row) {
$this->error(__('No Results were found')); $this->error(__('No Results were found'));
@ -132,9 +135,13 @@ class Group extends Backend
if ($this->request->isPost()) { if ($this->request->isPost()) {
$this->token(); $this->token();
$params = $this->request->post("row/a", [], 'strip_tags'); $params = $this->request->post("row/a", [], 'strip_tags');
// 父节点不能是它自身的子节点 //父节点不能是非权限内节点
if (!in_array($params['pid'], $this->childrenGroupIds)) { if (!in_array($params['pid'], $this->childrenGroupIds)) {
$this->error(__('The parent group can not be its own child')); $this->error(__('The parent group exceeds permission limit'));
}
// 父节点不能是它自身的子节点或自己本身
if (in_array($params['pid'], Tree::instance()->getChildrenIds($row->id,true))){
$this->error(__('The parent group can not be its own child or itself'));
} }
$params['rules'] = explode(',', $params['rules']); $params['rules'] = explode(',', $params['rules']);

2
application/admin/lang/zh-cn/auth/group.php
View File

@ -7,4 +7,6 @@ return [
'Can not change the parent to child' => '父组别不能是它的子组别', 'Can not change the parent to child' => '父组别不能是它的子组别',
'Can not change the parent to self' => '父组别不能是它的子组别', 'Can not change the parent to self' => '父组别不能是它的子组别',
'You can not delete group that contain child group and administrators' => '你不能删除含有子组和管理员的组', 'You can not delete group that contain child group and administrators' => '你不能删除含有子组和管理员的组',
'The parent group exceeds permission limit' => '父组别超出权限范围',
'The parent group can not be its own child or itself' => '父组别不能是它的子组别及本身',
]; ];