From 919bd6de8732714980d8fb0b1219e8f901279aec Mon Sep 17 00:00:00 2001
From: vran <vran_dev@foxmail.com>
Date: Sat, 14 May 2022 17:11:58 +0800
Subject: [PATCH] fix: group owner and member can't view project log

---
 api/src/main/java/com/databasir/api/AuditLogController.java | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/api/src/main/java/com/databasir/api/AuditLogController.java b/api/src/main/java/com/databasir/api/AuditLogController.java
index 13a5c8d..d31d8c3 100644
--- a/api/src/main/java/com/databasir/api/AuditLogController.java
+++ b/api/src/main/java/com/databasir/api/AuditLogController.java
@@ -25,7 +25,9 @@ public class AuditLogController {
     private final OperationLogService operationLogService;
 
     @GetMapping(Routes.OperationLog.LIST)
-    @PreAuthorize("hasAnyAuthority('SYS_OWNER')")
+    @PreAuthorize("hasAnyAuthority('SYS_OWNER',"
+            + " 'GROUP_OWNER?groupId='+#condition.involveGroupId,"
+            + " 'GROUP_MEMBER?groupId='+#condition.involveGroupId)")
     @Operation(summary = "查询操作日志")
     public JsonData<Page<OperationLogPageResponse>> list(@PageableDefault(sort = "id", direction = Sort.Direction.DESC)
                                                          Pageable page,