From b4e9306d921c494b7cdf286dc0f9081cfcf9a94c Mon Sep 17 00:00:00 2001 From: "si@aidatagov.com" Date: Tue, 25 Feb 2025 22:35:03 +0800 Subject: [PATCH] =?UTF-8?q?=E6=95=B0=E6=8D=AE=E5=AE=89=E5=85=A8=E7=AE=A1?= =?UTF-8?q?=E7=90=86=E5=91=98?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- .../module_admin/controller/metasecurity_controller.py | 8 ++++---- .../module_admin/service/metasecurity_service.py | 8 ++++++++ 2 files changed, 12 insertions(+), 4 deletions(-) diff --git a/vue-fastapi-backend/module_admin/controller/metasecurity_controller.py b/vue-fastapi-backend/module_admin/controller/metasecurity_controller.py index 120f798..ccb9af1 100644 --- a/vue-fastapi-backend/module_admin/controller/metasecurity_controller.py +++ b/vue-fastapi-backend/module_admin/controller/metasecurity_controller.py @@ -21,7 +21,7 @@ metaSecurityController = APIRouter(prefix='/meta/metaSecurity', dependencies=[De # MetaSecurity Column相关API @metaSecurityController.get( - '/col/list', response_model=PageResponseModel, dependencies=[Depends(CheckUserInterfaceAuth('meta:metaSecurityCol:list'))] + '/col/list', response_model=PageResponseModel, dependencies=[Depends(CheckUserInterfaceAuth('meta:metasecurity:col:list'))] ) async def get_meta_security_col_list( request: Request, @@ -31,7 +31,7 @@ async def get_meta_security_col_list( col_page_query_result = await MetaSecurityService.get_meta_security_col_list_services(query_db, col_page_query, is_page=True) logger.info('获取列配置列表成功') return ResponseUtil.success(model_content=col_page_query_result) -@metaSecurityController.get('/row/list', response_model=PageResponseModel, dependencies=[Depends(CheckUserInterfaceAuth('meta:metaSecurityRow:list'))] +@metaSecurityController.get('/row/list', response_model=PageResponseModel, dependencies=[Depends(CheckUserInterfaceAuth('meta:metasecurity:row:list'))] ) async def get_meta_security_row_list( request: Request, @@ -42,7 +42,7 @@ async def get_meta_security_row_list( logger.info('获取行配置列表成功') return ResponseUtil.success(model_content=row_page_query_result) @metaSecurityController.get( - '/row/{row_id}', response_model=MetaSecurityRowModel, dependencies=[Depends(CheckUserInterfaceAuth('meta:metaSecurityRow:query'))] + '/row/{row_id}', response_model=MetaSecurityRowModel, dependencies=[Depends(CheckUserInterfaceAuth('meta:metasecurity:row:list'))] ) async def query_detail_row(request: Request, row_id: str, query_db: AsyncSession = Depends(get_db)): config_detail_result = await MetaSecurityService.row_detail_services(query_db, row_id) @@ -50,7 +50,7 @@ async def query_detail_row(request: Request, row_id: str, query_db: AsyncSession return ResponseUtil.success(data=config_detail_result) @metaSecurityController.get( - '/col/{col_id}', response_model=MetaSecurityColModel, dependencies=[Depends(CheckUserInterfaceAuth('meta:metaSecurityCol:query'))] + '/col/{col_id}', response_model=MetaSecurityColModel, dependencies=[Depends(CheckUserInterfaceAuth('meta:metasecurity:col:list'))] ) async def query_detail_col(request: Request, col_id: str, query_db: AsyncSession = Depends(get_db)): config_detail_result = await MetaSecurityService.col_detail_services(query_db, col_id) diff --git a/vue-fastapi-backend/module_admin/service/metasecurity_service.py b/vue-fastapi-backend/module_admin/service/metasecurity_service.py index 3f8fb56..71714e2 100644 --- a/vue-fastapi-backend/module_admin/service/metasecurity_service.py +++ b/vue-fastapi-backend/module_admin/service/metasecurity_service.py @@ -302,6 +302,14 @@ class MetaSecurityService: # await test_connection(dbConnent) #3.执行原始sql result = await cls.execute_sql(dbConnent, page_object.sqlStr,"原始") + if 3 in role_id_list: + resultDict={ + "ctrlSql": page_object.sqlStr, + "data": result, + "message":"数据安全管理员权限" + } + return resultDict + #4.获取sql中涉及的表名 sqlTableNames =await cls.get_tables_from_sql(page_object.sqlStr) #5.根据表名获取数据库中的字段名