llvy.ltd/casdoor
1
0
Fork 0
mirror of https://github.com/casdoor/casdoor.git synced 2025-05-22 18:25:47 +08:00
Code Issues Packages Projects Releases Wiki Activity

Add other authz rules.

Browse Source
This commit is contained in:
Yang Luo 2021-03-06 00:40:11 +08:00
parent 1dfcfb307f
commit e792e814d4
2 changed files with 4 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
authz/authz.go
View File

@ -48,7 +48,8 @@ e = some(where (p.eft == allow))
[matchers]
m = (r.subOwner == p.subOwner || p.subOwner == "*") && (r.subName == p.subName || p.subName == "*") && \
(r.method == p.method || p.method == "*") && (r.urlPath == p.urlPath || p.urlPath == "*") && \
(r.objOwner == p.objOwner || p.objOwner == "*") && (r.objName == p.objName || p.objName == "*")
(r.objOwner == p.objOwner || p.objOwner == "*") && (r.objName == p.objName || p.objName == "*") || \
(r.urlPath == "/api/update-user" && r.subOwner == r.objOwner && r.subName == r.objName)
`
m, err := model.NewModelFromString(modelText)
@ -72,6 +73,7 @@ p, *, *, GET, /api/get-account, *, *
p, *, *, GET, /api/auth/login, *, *
p, *, *, GET, /api/get-application, *, *
p, *, *, GET, /api/get-users, *, *
p, *, *, GET, /api/get-user, *, *
`
sa := stringadapter.NewAdapter(ruleText)

2
web/src/UserEditPage.js
View File

@ -107,7 +107,7 @@ class UserEditPage extends React.Component {
{i18next.t("general:Name")}:
</Col>
<Col span={22} >
<Input value={this.state.user.name} onChange={e => {
<Input value={this.state.user.name} disabled={true} onChange={e => {
this.updateUserField('name', e.target.value);
}} />
</Col>