Explorar o código

修复在验证移动接口&函数时,获取的分组ID不是新值的问题

mxd %!s(int64=3) %!d(string=hai) anos
pai
achega
7d71f2787e

+ 4 - 1
magic-api/src/main/java/org/ssssssss/magicapi/controller/MagicAPIController.java

@@ -97,7 +97,10 @@ public class MagicAPIController extends MagicController implements MagicExceptio
 	@ResponseBody
 	@Valid(readonly = false)
 	public JsonBean<Boolean> apiMove(HttpServletRequest request, String id, String groupId) {
-		isTrue(allowVisit(request, Authorization.SAVE, getApiInfo(id)), PERMISSION_INVALID);
+		ApiInfo apiInfo = getApiInfo(id).copy();
+		// 新的分组ID
+		apiInfo.setGroupId(groupId);
+		isTrue(allowVisit(request, Authorization.SAVE, apiInfo), PERMISSION_INVALID);
 		return new JsonBean<>(magicAPIService.moveApi(id, groupId));
 	}
 

+ 3 - 1
magic-api/src/main/java/org/ssssssss/magicapi/controller/MagicFunctionController.java

@@ -59,7 +59,9 @@ public class MagicFunctionController extends MagicController implements MagicExc
 	@ResponseBody
 	@Valid(readonly = false)
 	public JsonBean<Boolean> move(HttpServletRequest request, String id, String groupId) {
-		isTrue(allowVisit(request, Authorization.SAVE, getFunctionInfo(id)), PERMISSION_INVALID);
+		FunctionInfo functionInfo = getFunctionInfo(id);
+		functionInfo.setGroupId(groupId);
+		isTrue(allowVisit(request, Authorization.SAVE, functionInfo), PERMISSION_INVALID);
 		return new JsonBean<>(magicAPIService.moveFunction(id, groupId));
 	}