fix(仪表板): 删除分享IDOR漏洞

2023-05-14 20:16:52 +08:00 · 2023-05-14 20:16:52 +08:00 · 32305503e6
commit 32305503e6
parent 6725e57330
1 changed files with 1 additions and 0 deletions
--- a/backend/src/main/java/io/dataease/controller/panel/api/ShareApi.java
+++ b/backend/src/main/java/io/dataease/controller/panel/api/ShareApi.java
@ -56,6 +56,7 @@ public interface ShareApi {
    @PostMapping("/removeShares")
    void removeShares(PanelShareRemoveRequest request);

+    @DePermission(type = DePermissionType.PANEL)
    @ApiOperation("删除仪表板所有分享")
    @PostMapping("/removePanelShares/{panelId}")
    void removePanelShares(@PathVariable("panelId") String panelId);