v1.0.23 #33
+2
-7
@@ -276,15 +276,10 @@ public class GaoUserInviteServiceImplement implements GaoUserInviteService {
|
||||
|
||||
private Role requireInvitableRole(String inviterUserId, String roleId, String storeId) {
|
||||
Role role = requireValidRole(roleId, storeId);
|
||||
List<String> directRoleIdList = userRoleService.listRoleByUserId(ModuleCode.GAO, inviterUserId)
|
||||
.stream()
|
||||
.map(Role::getId)
|
||||
.toList();
|
||||
boolean adminInviteGlobalManager = isCoreAdmin() && isGlobalManagerRole(role);
|
||||
boolean descendant = adminInviteGlobalManager || (authorizationScopeService.listManageableRole(inviterUserId, ModuleCode.GAO)
|
||||
boolean descendant = adminInviteGlobalManager || authorizationScopeService.listManageableRole(inviterUserId, ModuleCode.GAO)
|
||||
.stream()
|
||||
.anyMatch(item -> role.getId().equals(item.getId()))
|
||||
&& !directRoleIdList.contains(role.getId()));
|
||||
.anyMatch(item -> role.getId().equals(item.getId()));
|
||||
if (!descendant) {
|
||||
throw new TimiException(TimiCode.PERMISSION_ERROR, "角色不在可邀请范围内");
|
||||
}
|
||||
|
||||
Reference in New Issue
Block a user