feature: forbidden disable/enable self (#55)

* feat: add k3s sample config * feat: update frontend resource
2025-08-08 17:32:14 +08:00 · 2022-03-20 13:22:39 +08:00
parent c0cc333376
commit e1854b0b49
20 changed files with 137 additions and 17 deletions
--- a/api/src/main/java/com/databasir/api/UserController.java
+++ b/api/src/main/java/com/databasir/api/UserController.java
@@ -3,6 +3,7 @@ package com.databasir.api;
 import com.databasir.api.validator.UserOperationValidator;
 import com.databasir.common.JsonData;
 import com.databasir.common.exception.Forbidden;
+import com.databasir.core.domain.DomainErrors;
 import com.databasir.core.domain.log.annotation.Operation;
 import com.databasir.core.domain.user.data.*;
 import com.databasir.core.domain.user.service.UserService;
@@ -37,6 +38,9 @@ public class UserController {
    @PreAuthorize("hasAnyAuthority('SYS_OWNER')")
    @Operation(module = Operation.Modules.USER, name = "禁用用户", involvedUserId = "#userId")
    public JsonData<Void> disableUser(@PathVariable Integer userId) {
+        if (userOperationValidator.isMyself(userId)) {
+            throw DomainErrors.CANNOT_UPDATE_SELF_ENABLED_STATUS.exception();
+        }
        userService.switchEnableStatus(userId, false);
        return JsonData.ok();
    }
@@ -45,6 +49,9 @@ public class UserController {
    @PreAuthorize("hasAnyAuthority('SYS_OWNER')")
    @Operation(module = Operation.Modules.USER, name = "启用用户", involvedUserId = "#userId")
    public JsonData<Void> enableUser(@PathVariable Integer userId) {
+        if (userOperationValidator.isMyself(userId)) {
+            throw DomainErrors.CANNOT_UPDATE_SELF_ENABLED_STATUS.exception();
+        }
        userService.switchEnableStatus(userId, true);
        return JsonData.ok();
    }
--- a/api/src/main/resources/static/index.html
+++ b/api/src/main/resources/static/index.html
@@ -1 +1 @@
-<!doctype html><html lang=""><head><meta charset="utf-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><meta name="viewport" content="width=device-width,initial-scale=1"><link rel="icon" href="/favicon.ico"><title>databasir-frontend</title><script defer="defer" type="module" src="/js/chunk-vendors.45746587.js"></script><script defer="defer" type="module" src="/js/app.08e3c996.js"></script><link href="/css/chunk-vendors.8e1003a6.css" rel="stylesheet"><link href="/css/app.757c1ef3.css" rel="stylesheet"><script defer="defer" src="/js/chunk-vendors-legacy.54c3660b.js" nomodule></script><script defer="defer" src="/js/app-legacy.3d5e4b5d.js" nomodule></script></head><body><noscript><strong>We're sorry but databasir-frontend doesn't work properly without JavaScript enabled. Please enable it to continue.</strong></noscript><div id="app"></div></body></html>
+<!doctype html><html lang=""><head><meta charset="utf-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><meta name="viewport" content="width=device-width,initial-scale=1"><link rel="icon" href="/favicon.ico"><title>databasir-frontend</title><script defer="defer" type="module" src="/js/chunk-vendors.45746587.js"></script><script defer="defer" type="module" src="/js/app.d1e6fea2.js"></script><link href="/css/chunk-vendors.8e1003a6.css" rel="stylesheet"><link href="/css/app.757c1ef3.css" rel="stylesheet"><script defer="defer" src="/js/chunk-vendors-legacy.54c3660b.js" nomodule></script><script defer="defer" src="/js/app-legacy.b8d396b4.js" nomodule></script></head><body><noscript><strong>We're sorry but databasir-frontend doesn't work properly without JavaScript enabled. Please enable it to continue.</strong></noscript><div id="app"></div></body></html>
--- a/api/src/main/resources/static/js/130-legacy.8b88285b.js
+++ b/api/src/main/resources/static/js/130-legacy.8b88285b.js
--- a/api/src/main/resources/static/js/130-legacy.8b88285b.js.map
+++ b/api/src/main/resources/static/js/130-legacy.8b88285b.js.map
--- a/api/src/main/resources/static/js/130.c7db75bc.js
+++ b/api/src/main/resources/static/js/130.c7db75bc.js
--- a/api/src/main/resources/static/js/130.c7db75bc.js.map
+++ b/api/src/main/resources/static/js/130.c7db75bc.js.map
--- a/api/src/main/resources/static/js/321-legacy.5e095d04.js
+++ b/api/src/main/resources/static/js/321-legacy.5e095d04.js
--- a/api/src/main/resources/static/js/321-legacy.5e095d04.js.map
+++ b/api/src/main/resources/static/js/321-legacy.5e095d04.js.map
--- a/api/src/main/resources/static/js/321.e07f090a.js
+++ b/api/src/main/resources/static/js/321.e07f090a.js
--- a/api/src/main/resources/static/js/321.e07f090a.js.map
+++ b/api/src/main/resources/static/js/321.e07f090a.js.map
--- a/api/src/main/resources/static/js/719-legacy.85eb5e28.js
+++ b/api/src/main/resources/static/js/719-legacy.85eb5e28.js
--- a/api/src/main/resources/static/js/719-legacy.85eb5e28.js.map
+++ b/api/src/main/resources/static/js/719-legacy.85eb5e28.js.map
--- a/api/src/main/resources/static/js/719.df03c200.js
+++ b/api/src/main/resources/static/js/719.df03c200.js
--- a/api/src/main/resources/static/js/719.df03c200.js.map
+++ b/api/src/main/resources/static/js/719.df03c200.js.map
--- a/api/src/main/resources/static/js/app-legacy.b8d396b4.js
+++ b/api/src/main/resources/static/js/app-legacy.b8d396b4.js
--- a/api/src/main/resources/static/js/app-legacy.b8d396b4.js.map
+++ b/api/src/main/resources/static/js/app-legacy.b8d396b4.js.map
--- a/api/src/main/resources/static/js/app.d1e6fea2.js
+++ b/api/src/main/resources/static/js/app.d1e6fea2.js
--- a/api/src/main/resources/static/js/app.d1e6fea2.js.map
+++ b/api/src/main/resources/static/js/app.d1e6fea2.js.map