owl-cli 6.58.0 → 6.60.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
|
@@ -17,6 +17,7 @@
|
|
|
17
17
|
|
|
18
18
|
|
|
19
19
|
var orgId = env.orgId;
|
|
20
|
+
var roleId = env.roleId;
|
|
20
21
|
var orgIds = env.orgIds;
|
|
21
22
|
|
|
22
23
|
var params = JSON.parse($body);
|
|
@@ -38,7 +39,7 @@
|
|
|
38
39
|
out.print(JSON.stringify(ret));
|
|
39
40
|
return;
|
|
40
41
|
}
|
|
41
|
-
if(orgId && oldObj._orgIds && oldObj._orgIds){
|
|
42
|
+
if(roleId!=='internal' && orgId && oldObj._orgIds && oldObj._orgIds){
|
|
42
43
|
//检查是否有权限修改
|
|
43
44
|
if(orgId!='0' && oldObj._orgIds.indexOf(orgId)===-1){
|
|
44
45
|
var ret = {
|
|
@@ -30,7 +30,20 @@ function checklogin() {
|
|
|
30
30
|
allowed_appIds: ["*"]
|
|
31
31
|
}
|
|
32
32
|
|
|
33
|
-
|
|
33
|
+
var env = {
|
|
34
|
+
now: new Date().getTime(),
|
|
35
|
+
loginUserId: 'internal',
|
|
36
|
+
loginId: 'internal',
|
|
37
|
+
loginUser:user,
|
|
38
|
+
shopId: m,
|
|
39
|
+
warehouseId: "",
|
|
40
|
+
roleId: 'internal',
|
|
41
|
+
orgId: 'internal',
|
|
42
|
+
orgIds: 'internal',
|
|
43
|
+
m: m
|
|
44
|
+
}
|
|
45
|
+
return env;
|
|
46
|
+
|
|
34
47
|
} else {
|
|
35
48
|
var isid = SessionService.getSessionId(request);
|
|
36
49
|
var now = new Date().getTime();
|
|
@@ -326,6 +339,7 @@ function checkUpdatePermission(data,diffresult,permissions,orgId){
|
|
|
326
339
|
}
|
|
327
340
|
}
|
|
328
341
|
//啥都不做代表检查通过
|
|
342
|
+
//TODO:检查用户权限
|
|
329
343
|
}
|
|
330
344
|
|
|
331
345
|
function filterFields(data, permissions, orgId) {
|
|
@@ -32,7 +32,7 @@
|
|
|
32
32
|
var roleId = env.roleId
|
|
33
33
|
if(orgId && oldObj && oldObj._orgIds){
|
|
34
34
|
//检查是否有权限修改
|
|
35
|
-
if(orgId!='0' && oldObj._orgIds.indexOf(orgId)===-1){
|
|
35
|
+
if(roleId!=='internal' && orgId!='0' && oldObj._orgIds.indexOf(orgId)===-1){
|
|
36
36
|
var ret = {
|
|
37
37
|
state:'err',
|
|
38
38
|
code: 'no permission',
|
|
@@ -54,13 +54,18 @@
|
|
|
54
54
|
modelObject.m = env.m;
|
|
55
55
|
|
|
56
56
|
//如果检查不通过，则会抛出异常
|
|
57
|
-
|
|
57
|
+
if(roleId!=='internal'){
|
|
58
|
+
checkPermission(modelObject,permissions,orgId,"add");
|
|
59
|
+
}
|
|
60
|
+
|
|
58
61
|
var newdata = @projectCodeService.add( modelObject,env );
|
|
59
62
|
}
|
|
60
63
|
else {
|
|
61
64
|
modelObject._orgIds = [modelObject._orgId].concat(getParentOrgIds(modelObject._orgId));
|
|
62
65
|
diffResult = diff(oldObj,modelObject,"");
|
|
63
|
-
|
|
66
|
+
if(roleId!=='internal') {
|
|
67
|
+
checkUpdatePermission(modelObject, diffResult, permissions, orgId);
|
|
68
|
+
}
|
|
64
69
|
var merged = merge(oldObj,modelObject,permissions,orgId);
|
|
65
70
|
var newdata = @projectCodeService.update( merged,env);
|
|
66
71
|
}
|