v1.0.23 #33
+2
-7
@@ -276,15 +276,10 @@ public class GaoUserInviteServiceImplement implements GaoUserInviteService {
|
|||||||
|
|
||||||
private Role requireInvitableRole(String inviterUserId, String roleId, String storeId) {
|
private Role requireInvitableRole(String inviterUserId, String roleId, String storeId) {
|
||||||
Role role = requireValidRole(roleId, storeId);
|
Role role = requireValidRole(roleId, storeId);
|
||||||
List<String> directRoleIdList = userRoleService.listRoleByUserId(ModuleCode.GAO, inviterUserId)
|
|
||||||
.stream()
|
|
||||||
.map(Role::getId)
|
|
||||||
.toList();
|
|
||||||
boolean adminInviteGlobalManager = isCoreAdmin() && isGlobalManagerRole(role);
|
boolean adminInviteGlobalManager = isCoreAdmin() && isGlobalManagerRole(role);
|
||||||
boolean descendant = adminInviteGlobalManager || (authorizationScopeService.listManageableRole(inviterUserId, ModuleCode.GAO)
|
boolean descendant = adminInviteGlobalManager || authorizationScopeService.listManageableRole(inviterUserId, ModuleCode.GAO)
|
||||||
.stream()
|
.stream()
|
||||||
.anyMatch(item -> role.getId().equals(item.getId()))
|
.anyMatch(item -> role.getId().equals(item.getId()));
|
||||||
&& !directRoleIdList.contains(role.getId()));
|
|
||||||
if (!descendant) {
|
if (!descendant) {
|
||||||
throw new TimiException(TimiCode.PERMISSION_ERROR, "角色不在可邀请范围内");
|
throw new TimiException(TimiCode.PERMISSION_ERROR, "角色不在可邀请范围内");
|
||||||
}
|
}
|
||||||
|
|||||||
Reference in New Issue
Block a user