From 4b8c5b8495453a6df3b81aaf96ff860cf21e485b Mon Sep 17 00:00:00 2001
From: pycook <pycook@126.com>
Date: Wed, 29 Nov 2023 17:40:12 +0800
Subject: [PATCH] feat(api): only the role cmdb_admin can modify the CIType
 group (#280)

---
 cmdb-api/api/views/cmdb/ci_type.py | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/cmdb-api/api/views/cmdb/ci_type.py b/cmdb-api/api/views/cmdb/ci_type.py
index 4e02d40..1704f1b 100644
--- a/cmdb-api/api/views/cmdb/ci_type.py
+++ b/cmdb-api/api/views/cmdb/ci_type.py
@@ -105,6 +105,7 @@ class CITypeGroupView(APIView):
 
         return self.jsonify(group.to_dict())
 
+    @role_required(RoleEnum.CONFIG)
     @args_validate(CITypeGroupManager.cls)
     def put(self, gid=None):
         if "/order" in request.url:
@@ -506,3 +507,4 @@ class CITypeFilterPermissionView(APIView):
     @auth_with_app_token
     def get(self, type_id):
         return self.jsonify(CIFilterPermsCRUD().get(type_id))
+