Explorar el Código

修复 未分配角色的用户能获取所有按钮权限 问题

夜鹰 hace 3 meses
padre
commit
402e7db391
Se han modificado 1 ficheros con 5 adiciones y 0 borrados
  1. 5 0
      Admin.NET/Admin.NET.Core/Service/Menu/SysMenuService.cs

+ 5 - 0
Admin.NET/Admin.NET.Core/Service/Menu/SysMenuService.cs

@@ -338,6 +338,11 @@ public class SysMenuService : IDynamicApiController, ITransient
         if (permissions != null) return permissions;
 
         var menuIdList = _userManager.SuperAdmin || _userManager.SysAdmin ? new() : await GetMenuIdList();
+        if(menuIdList.Count <= 0 && !_userManager.SuperAdmin)
+        {
+            //_sysCacheService.Set(CacheConst.KeyUserButton + userId, new List<string>(), TimeSpan.FromDays(7));
+            return new List<string>();
+        }
 
         permissions = await _sysMenuRep.AsQueryable()
             .InnerJoinIF<SysTenantMenu>(!_userManager.SuperAdmin, (u, t) => t.TenantId == _userManager.TenantId && u.Id == t.MenuId)