Pārlūkot izejas kodu

feat: 修改权限放行

zhaoxingrui 4 gadi atpakaļ
vecāks
revīzija
6f8bb67779

+ 2 - 2
web/src/main/java/cn/seecoder/web/infrastructure/config/WebSecurityConfig.java

@@ -88,7 +88,7 @@ public class WebSecurityConfig extends WebSecurityConfigurerAdapter {
                 .antMatchers(HttpMethod.GET, "/deployments/list").access("@authTools.checkProjOwnershipParam(request)")
                 .antMatchers(HttpMethod.GET, "/deployments/log").access("@authTools.checkProjPipelineParam(request)")
                 .antMatchers(HttpMethod.POST, "/deployments").access("@authTools.checkProjPipelineParam(request)")
-                .antMatchers(HttpMethod.DELETE, "/deployments").access("@authTools.checkProjPipelineParam(request)")
+                .antMatchers(HttpMethod.DELETE, "/deployments").permitAll()
                 // Pipeline Controller
                 .antMatchers(HttpMethod.GET, "/pipelines/list").access("@authTools.checkProjOwnershipParam(request)")
                 .antMatchers(HttpMethod.GET, "/pipelines").access("@authTools.checkProjPipelineParam(request)")
@@ -98,7 +98,7 @@ public class WebSecurityConfig extends WebSecurityConfigurerAdapter {
                 .antMatchers(HttpMethod.GET, "/pipelines/record/details").access("@authTools.checkPipelineRecordOwnershipParam(request)")
                 .antMatchers(HttpMethod.POST, "/pipelines").authenticated()
                 .antMatchers(HttpMethod.PUT, "/pipelines/config").access("@authTools.checkProjPipelineBody(request)")
-                .antMatchers(HttpMethod.DELETE, "/pipelines").permitAll()
+                .antMatchers(HttpMethod.DELETE, "/pipelines").access("@authTools.checkProjPipelineParam(request)")
                 // Stage Controller
                 .antMatchers(HttpMethod.GET, "/stages").authenticated()
                 // Project Controller