fix: 角色能看到未授权项目的问题

pull/592/head
yombo 2023-03-02 11:20:38 +08:00
parent f9e28f4738
commit 206bbcbc12
1 changed files with 2 additions and 1 deletions

View File

@ -17,11 +17,12 @@ import json
class RepositoryView(View): class RepositoryView(View):
@auth('deploy.repository.view|deploy.request.add|deploy.request.edit') @auth('deploy.repository.view|deploy.request.add|deploy.request.edit')
def get(self, request): def get(self, request):
apps = request.user.deploy_perms['apps']
deploy_id = request.GET.get('deploy_id') deploy_id = request.GET.get('deploy_id')
data = Repository.objects.annotate( data = Repository.objects.annotate(
app_name=F('app__name'), app_name=F('app__name'),
env_name=F('env__name'), env_name=F('env__name'),
created_by_user=F('created_by__nickname')) created_by_user=F('created_by__nickname')).filter(deploy_id__in=apps)
if deploy_id: if deploy_id:
data = data.filter(deploy_id=deploy_id, status='5') data = data.filter(deploy_id=deploy_id, status='5')
return json_response([x.to_view() for x in data]) return json_response([x.to_view() for x in data])