✨ KIRAKIRA RBAC & 权限控制 #27
Draft
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
1. 隐藏了旧的通过 role string 判断方式的鉴权接口，现在该接口对 admin 和 blocked 的 role 判定都会返回 fales，其他返回 true。稍后会将其他所有需要鉴权的接口改为 RBAC 鉴权。 2. 新增 RBAC 鉴权功能。 3. 暂时移除了封禁用户和解封用户功能，该功能稍后会与 RBAC 合并。会有一个专门的 “blocked-user” 角色，该角色只拥有少量接口的权限。
1. 删除旧的权限验证函数，转为 RBAC 验证 2. 删除了管理员可以无限创建邀请码的例外判定。 以下是本次加入了 RBAC 的接口： * /video/danmaku/emit * /user/update/info * /video/comment/emit * /user/blocked/info * /user/adminGetUserInfo * /user/approveUserInfo * /user/adminClearUserInfo * /video/comment/adminDeleteComment * /video/upload * /video/tus * /video/delete * /video/pending * /video/pending/approved * /video/tag/create
新增以下受 RBAC 控制的接口 * `/rbac/deleteRbacApiPath`（删除 RBAC API 路径） * `/rbac/getRbacApiPath`（获取 RBAC API 路径） * `/rbac/deleteRbacRole`（删除 RBAC 角色） * `/rbac/getRbacRole`（获取 RBAC 角色）
1. 新增以下接口： * /rbac/adminGetUserRolesByUid - 通过 UUID 获取一个用户的角色 * /rbac/adminUpdateUserRole - 管理员更新用户角色 2. 修复了以下接口如果没有传递任何查询参数时会报错的问题。 * getRbacApiPathService * getRbacRoleService
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
开发并交付 KIRAKIRA RBAC 与权限控制功能。
以下接口已经接入 RBAC
role: user
role: administrator
role: root
啊啊啊，