From b01ef1585c1d0d92c1e75f0edc0cad3ee6022672 Mon Sep 17 00:00:00 2001
From: ibuler <ibuler@qq.com>
Date: Wed, 21 Dec 2022 18:37:05 +0800
Subject: [PATCH] perf: account secret rbac permission

---
 apps/assets/api/account/account.py | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

diff --git a/apps/assets/api/account/account.py b/apps/assets/api/account/account.py
index 9e2697adb..8dad13b3c 100644
--- a/apps/assets/api/account/account.py
+++ b/apps/assets/api/account/account.py
@@ -76,8 +76,7 @@ class AccountHistoriesSecretAPI(RecordViewLogMixin, ListAPIView):
     model = Account.history.model
     serializer_class = serializers.AccountHistorySerializer
     http_method_names = ['get', 'options']
-    # Todo: 记得打开
-    # permission_classes = [RBACPermission, UserConfirmation.require(ConfirmType.MFA)]
+    permission_classes = [RBACPermission, UserConfirmation.require(ConfirmType.MFA)]
     rbac_perms = {
         'list': 'assets.view_accountsecret',
     }