yumoqing/pipeline-app
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix(rbac): 删/** any全局通配+产线shell改logined——any不应覆盖五条产线

Browse Source
This commit is contained in:
yumoqing 2026-08-31 16:40:05 +08:00
parent 6fa1dddd11
commit a7d78655d3
1 changed files with 7 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

13
scripts/load_path.py
View File

@ -51,16 +51,17 @@ PERMS = [
# showcase
("/showcase", "showcase", "logined"),
("/showcase/*", "showcase", "logined"),
# app root (any)
("/**", "app", "any"),
# app root (any)：仅登录页资产/全局静态资源。
# 注意：禁止 /** any——会让匿名访问全部路径（含五条产线）。
# 产线 shell（sdlc/core/ops/dist index.ui）须 logined，产线对匿名不可见。
("/index.ui", "app", "any"),
("/todo_badge.js", "app", "any"),
("/index_tab.js", "app", "any"),
("/theme_toggle.js", "app", "any"),
("/pipeline-sdlc/index.ui", "pipeline_sdlc", "any"),
("/pipeline_core/index.ui", "pipeline_core", "any"),
("/pipeline_ops/index.ui", "pipeline_ops", "any"),
("/pipeline_dist/index.ui", "pipeline_dist", "any"),
("/pipeline-sdlc/index.ui", "pipeline_sdlc", "logined"),
("/pipeline_core/index.ui", "pipeline_core", "logined"),
("/pipeline_ops/index.ui", "pipeline_ops", "logined"),
("/pipeline_dist/index.ui", "pipeline_dist", "logined"),
]