fix: group owner and member can't view project log

2022-05-14 17:11:58 +08:00 · 2022-05-14 17:11:58 +08:00 · 919bd6de87
parent bd07d8a018
commit 919bd6de87
1 changed files with 3 additions and 1 deletions
--- a/api/src/main/java/com/databasir/api/AuditLogController.java
+++ b/api/src/main/java/com/databasir/api/AuditLogController.java
@ -25,7 +25,9 @@ public class AuditLogController {
    private final OperationLogService operationLogService;

    @GetMapping(Routes.OperationLog.LIST)
-    @PreAuthorize("hasAnyAuthority('SYS_OWNER')")
+    @PreAuthorize("hasAnyAuthority('SYS_OWNER',"
+            + " 'GROUP_OWNER?groupId='+#condition.involveGroupId,"
+            + " 'GROUP_MEMBER?groupId='+#condition.involveGroupId)")
    @Operation(summary = "查询操作日志")
    public JsonData<Page<OperationLogPageResponse>> list(@PageableDefault(sort = "id", direction = Sort.Direction.DESC)
                                                         Pageable page,