From 3347ca4d7484d9141b189462e169b2be4d324632 Mon Sep 17 00:00:00 2001 From: 江强 <jiangq@powerlbs.com> Date: 星期二, 27 七月 2021 09:33:12 +0800 Subject: [PATCH] fix:Issue #I42GRW 修复任意账户越权漏洞 --- ruoyi-ui/src/router/index.js | 27 ++++++++++++++++++++++++++- 1 files changed, 26 insertions(+), 1 deletions(-) diff --git a/ruoyi-ui/src/router/index.js b/ruoyi-ui/src/router/index.js index 3f14fd3..d0c4b0b 100644 --- a/ruoyi-ui/src/router/index.js +++ b/ruoyi-ui/src/router/index.js @@ -5,7 +5,6 @@ /* Layout */ import Layout from '@/layout' -import ParentView from '@/components/ParentView'; /** * Note: 路由配置项 @@ -81,6 +80,32 @@ ] }, { + path: '/auth', + component: Layout, + hidden: true, + children: [ + { + path: 'role/:userId(\\d+)', + component: (resolve) => require(['@/views/system/user/authRole'], resolve), + name: 'AuthRole', + meta: { title: '分配角色'} + } + ] + }, + { + path: '/auth', + component: Layout, + hidden: true, + children: [ + { + path: 'user/:roleId(\\d+)', + component: (resolve) => require(['@/views/system/role/authUser'], resolve), + name: 'AuthUser', + meta: { title: '分配用户'} + } + ] + }, + { path: '/dict', component: Layout, hidden: true, -- Gitblit v1.9.2