center/dataease-dm
center/dataease-dm
13
0
Fork 0
forked from github/dataease
Code Pull Requests Activity

Merge pull request #5206 from dataease/pr@dev@fix_del_share_panle

Browse Source 
fix(仪表板): 删除分享IDOR漏洞
This commit is contained in:
fit2cloud-chenyw 2023-05-14 20:22:46 +08:00 committed by GitHub
commit 96323624a4
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 1 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
backend/src/main/java/io/dataease/controller/panel/api/ShareApi.java
View File

@ -56,6 +56,7 @@ public interface ShareApi {
@PostMapping("/removeShares") @PostMapping("/removeShares")
void removeShares(PanelShareRemoveRequest request); void removeShares(PanelShareRemoveRequest request);
@DePermission(type = DePermissionType.PANEL)
@ApiOperation("删除仪表板所有分享") @ApiOperation("删除仪表板所有分享")
@PostMapping("/removePanelShares/{panelId}") @PostMapping("/removePanelShares/{panelId}")
void removePanelShares(@PathVariable("panelId") String panelId); void removePanelShares(@PathVariable("panelId") String panelId);