fix(仪表板): 删除分享IDOR漏洞

2026-05-16 22:41:06 +08:00 · 2023-05-14 20:16:52 +08:00
parent 6725e57330
commit 32305503e6
1 changed files with 1 additions and 0 deletions
--- a/backend/src/main/java/io/dataease/controller/panel/api/ShareApi.java
+++ b/backend/src/main/java/io/dataease/controller/panel/api/ShareApi.java
@@ -56,6 +56,7 @@ public interface ShareApi {
    @PostMapping("/removeShares")
    void removeShares(PanelShareRemoveRequest request);

+    @DePermission(type = DePermissionType.PANEL)
    @ApiOperation("删除仪表板所有分享")
    @PostMapping("/removePanelShares/{panelId}")
    void removePanelShares(@PathVariable("panelId") String panelId);