Преглед на файлове

feat: 修改权限放行

zhaoxingrui преди 4 години
родител
ревизия
6f8bb67779
променени са 1 файла, в които са добавени 2 реда и са изтрити 2 реда
  1. 2 2
      web/src/main/java/cn/seecoder/web/infrastructure/config/WebSecurityConfig.java

+ 2 - 2
web/src/main/java/cn/seecoder/web/infrastructure/config/WebSecurityConfig.java

@@ -88,7 +88,7 @@ public class WebSecurityConfig extends WebSecurityConfigurerAdapter {
                 .antMatchers(HttpMethod.GET, "/deployments/list").access("@authTools.checkProjOwnershipParam(request)")
                 .antMatchers(HttpMethod.GET, "/deployments/log").access("@authTools.checkProjPipelineParam(request)")
                 .antMatchers(HttpMethod.POST, "/deployments").access("@authTools.checkProjPipelineParam(request)")
-                .antMatchers(HttpMethod.DELETE, "/deployments").access("@authTools.checkProjPipelineParam(request)")
+                .antMatchers(HttpMethod.DELETE, "/deployments").permitAll()
                 // Pipeline Controller
                 .antMatchers(HttpMethod.GET, "/pipelines/list").access("@authTools.checkProjOwnershipParam(request)")
                 .antMatchers(HttpMethod.GET, "/pipelines").access("@authTools.checkProjPipelineParam(request)")
@@ -98,7 +98,7 @@ public class WebSecurityConfig extends WebSecurityConfigurerAdapter {
                 .antMatchers(HttpMethod.GET, "/pipelines/record/details").access("@authTools.checkPipelineRecordOwnershipParam(request)")
                 .antMatchers(HttpMethod.POST, "/pipelines").authenticated()
                 .antMatchers(HttpMethod.PUT, "/pipelines/config").access("@authTools.checkProjPipelineBody(request)")
-                .antMatchers(HttpMethod.DELETE, "/pipelines").permitAll()
+                .antMatchers(HttpMethod.DELETE, "/pipelines").access("@authTools.checkProjPipelineParam(request)")
                 // Stage Controller
                 .antMatchers(HttpMethod.GET, "/stages").authenticated()
                 // Project Controller