shumengya/cloud-mail
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix: permission vulnerability

Browse Source
This commit is contained in:
eoao
2026-05-08 23:58:03 +08:00
parent c14615d1ef
commit 1b95707819
2 changed files with 4 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
mail-worker/src/api/role-api.js
View File

@@ -19,7 +19,7 @@ app.put('/role/set', async (c) => {
return c.json(result.ok());
});
app.get('/role/permTree', async (c) => {
app.get('/role/tree', async (c) => {
const tree = await permService.tree(c);
return c.json(result.ok(tree));
});

5
mail-worker/src/security/security.js
View File

@@ -48,6 +48,7 @@ const requirePerms = [
'/user/setStatus',
'/user/setType',
'/user/list',
'/user/restore',
'/user/resetSendCount',
'/user/add',
'/user/deleteAccount',
@@ -74,13 +75,13 @@ const premKey = {
'user:add': ['/user/add'],
'user:reset-send': ['/user/resetSendCount'],
'user:set-pwd': ['/user/setPwd'],
'user:set-status': ['/user/setStatus'],
'user:set-status': ['/user/setStatus', '/user/restore'],
'user:set-type': ['/user/setType'],
'user:delete': ['/user/delete','/user/deleteAccount'],
'all-email:query': ['/allEmail/list','/allEmail/latest'],
'all-email:delete': ['/allEmail/delete','/allEmail/batchDelete'],
'setting:query': ['/setting/query'],
'setting:set': ['/setting/set', '/setting/setBackground','/setting/deleteBackground'],
'setting:set': ['/setting/set', '/setting/setBackground','/setting/deleteBackground','/setting/setBlacklist'],
'analysis:query': ['/analysis/echarts'],
'reg-key:add': ['/regKey/add'],
'reg-key:query': ['/regKey/list','/regKey/history'],