统一验证管理员

2023-07-03 09:02:27 +08:00
parent b569249a6e
commit 80261cd9b2
2 changed files with 8 additions and 13 deletions
@@ -221,6 +221,14 @@ func (r *UserService) PutUser(c *gin.Context, requestUserId int64, putUserReques
 	}

 	adminRoleDao := dao.AdminRoleDao{}
+	adminRole, err := adminRoleDao.GetAdminRoleFirstById(loginRoleId)
+	if err != nil || adminRole == nil {
+		return false, errors.New("非法操作")
+	}
+
+	if adminRole.IsAdmin == 0 && loginUserId != requestUserId {
+		return false, errors.New("普通用户只可修改自己的用户数据")
+	}

 	if putUserRequest.Access != adminUser.Access {
 		// 检测账号名