deduceFilter时,如果是update,则父对象上拥有create/remove权限也可以进行操作"

This commit is contained in:
Xu Chang 2023-08-07 10:58:00 +08:00
parent bd2b0b006a
commit 4c717cb629
2 changed files with 2 additions and 2 deletions

View File

@ -193,7 +193,7 @@ var RelationAuth = /** @class */ (function () {
}
}
var getRecursiveDeducedFilters_1 = function (deduceEntity, deduceFilter) {
var excludeActions = action_1.readOnlyActions.concat(['create', 'remove']);
var excludeActions = action_1.readOnlyActions.concat([ /* 'create', 'remove' */]);
var updateActions = _this.schema[deduceEntity].actions.filter(function (a) { return !excludeActions.includes(a); });
if (!RelationAuth.SPECIAL_ENTITIES.includes(deduceEntity)) {
return _this.getDeducedEntityFilters(deduceEntity, deduceFilter, actions[0] === 'select' ? actions : updateActions, context);

View File

@ -244,7 +244,7 @@ export class RelationAuth<ED extends EntityDict & BaseEntityDict>{
}
const getRecursiveDeducedFilters = (deduceEntity: keyof ED, deduceFilter: ED[keyof ED]['Selection']['filter']) => {
const excludeActions = readOnlyActions.concat(['create', 'remove']);
const excludeActions = readOnlyActions.concat([/* 'create', 'remove' */]);
const updateActions = this.schema[deduceEntity].actions.filter(
(a) => !excludeActions.includes(a)
);