fix: 非admin账号可以通过直接访问url方式访问系统设置页面

2023-10-25 11:10:17 +08:00 · 2023-10-25 11:10:17 +08:00 · e963a95ffc
commit e963a95ffc
parent 796edb0be5
1 changed files with 5 additions and 0 deletions
--- a/core/core-frontend/src/permission.ts
+++ b/core/core-frontend/src/permission.ts
@ -49,6 +49,11 @@ router.beforeEach(async (to, from, next) => {
            return pre
          }, {})
        }
+        if (!pathValid(to.path) && to.path !== '/404' && !to.path.startsWith('/de-link')) {
+          const firstPath = getFirstAuthMenu()
+          next({ path: firstPath || '/404' })
+          return
+        }
        next()
        return
      }