From b5dea3816491ada3abb091bcf7f44758c455978b Mon Sep 17 00:00:00 2001 From: ibuler Date: Thu, 17 Mar 2022 16:04:36 +0800 Subject: [PATCH] =?UTF-8?q?perf:=20=E4=BF=AE=E6=94=B9bug?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- apps/rbac/builtin.py | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/apps/rbac/builtin.py b/apps/rbac/builtin.py index 803755769..a47139132 100644 --- a/apps/rbac/builtin.py +++ b/apps/rbac/builtin.py @@ -2,6 +2,8 @@ from django.utils.translation import ugettext_noop from .const import Scope, system_exclude_permissions, org_exclude_permissions +# Todo: 获取应该区分 系统用户,和组织用户的权限 +# 工作台也区分组织后再考虑 user_perms = ( ('rbac', 'menupermission', 'view', 'workspace'), ('rbac', 'menupermission', 'view', 'webterminal'), @@ -11,6 +13,7 @@ user_perms = ( ('assets', 'asset', 'match', 'asset'), ('assets', 'systemuser', 'match', 'systemuser'), ('assets', 'node', 'match', 'node'), + ('applications', 'application', 'match', 'application'), ('ops', 'commandexecution', 'add', 'commandexecution'), ('authentication', 'connectiontoken', 'add', 'connectiontoken'), ('tickets', 'ticket', 'view', 'ticket'), @@ -18,7 +21,6 @@ user_perms = ( auditor_perms = user_perms + ( ('rbac', 'menupermission', 'view', 'audit'), - ('rbac', 'menupermission', 'view', 'dashboard'), ('audits', '*', '*', '*'), ('terminal', 'commandstorage', 'view', 'commandstorage'), ('terminal', 'sessionreplay', 'view,download', 'sessionreplay'),