Merge pull request #500 from simontigers/common_decorator_perms

fix(api): decorator_perms_role_required
This commit is contained in:
simontigers 2024-04-28 19:43:22 +08:00 committed by GitHub
commit 373dda6f41
1 changed files with 2 additions and 0 deletions

View File

@ -18,6 +18,8 @@ def perms_role_required(app_name, resource_type_name, resource_name, perm, role_
if role_name:
if role_name not in session.get("acl", {}).get("parentRoles", []):
abort(403, ErrFormat.role_required.format(role_name))
return func(*args, **kwargs)
else:
abort(403, ErrFormat.resource_no_permission.format(resource_name, perm))