feat: refine ui permissions check (#29)

完善 UI 权限控制。 /kind feature ```release-note 完善 UI 权限控制。 ```
halo-dev · Sep 21, 2023 · c340509 · c340509
1 parent cf52f9d
commit c340509
Show file tree

Hide file tree

Showing 2 changed files with 16 additions and 8 deletions.
diff --git a/console/src/index.ts b/console/src/index.ts
@@ -25,7 +25,7 @@ export default definePlugin({
         component: AppStore,
         meta: {
           title: "应用市场",
-          permissions: [],
+          permissions: ["system:appstore:manage"],
           menu: {
             name: "应用市场",
             group: "system",
@@ -43,6 +43,7 @@ export default definePlugin({
         component: PrivacyPolicy,
         meta: {
           title: "Halo 应用市场隐私政策",
+          permissions: ["system:appstore:manage"],
         },
       },
     },
@@ -58,6 +59,7 @@ export default definePlugin({
             type: "PLUGIN",
           },
           priority: 0,
+          permissions: ["system:appstore:manage"],
         },
       ];
     },
@@ -71,6 +73,7 @@ export default definePlugin({
             type: "THEME",
           },
           priority: 11,
+          permissions: ["system:appstore:manage"],
         },
       ];
     },
@@ -83,6 +86,7 @@ export default definePlugin({
           props: {
             plugin: plugin,
           },
+          permissions: ["system:appstore:manage"],
         },
         {
           priority: 42,
@@ -92,6 +96,7 @@ export default definePlugin({
             plugin: plugin,
           },
           hidden: !!plugin.value.metadata.annotations?.[STORE_APP_ID],
+          permissions: ["system:appstore:manage"],
         },
       ];
     },
@@ -103,6 +108,7 @@ export default definePlugin({
           props: {
             theme,
           },
+          permissions: ["system:appstore:manage"],
         },
         {
           priority: 1,
@@ -111,6 +117,7 @@ export default definePlugin({
             theme,
           },
           hidden: !!theme.value.metadata.annotations?.[STORE_APP_ID],
+          permissions: ["system:appstore:manage"],
         },
       ];
     },
@@ -123,6 +130,7 @@ export default definePlugin({
             appId: plugin.value.metadata.annotations?.[STORE_APP_ID],
           },
           hidden: !plugin.value.metadata.annotations?.[STORE_APP_ID],
+          permissions: ["system:appstore:manage"],
         },
       ];
     },

diff --git a/src/main/resources/extensions/store-role-template.yaml b/src/main/resources/extensions/store-role-template.yaml
@@ -5,14 +5,14 @@ metadata:
   labels:
     halo.run/role-template: "true"
   annotations:
-    rbac.authorization.halo.run/module: "Appstore Management"
-    rbac.authorization.halo.run/display-name: "Appstore Management"
+    rbac.authorization.halo.run/module: "AppStore Management"
+    rbac.authorization.halo.run/display-name: "AppStore Management"
     rbac.authorization.halo.run/ui-permissions: |
       ["system:appstore:manage"]
     rbac.authorization.halo.run/dependencies: |
-      [ \"role-template-manage-plugins\", \"role-template-manage-themes\" ]
+      [ "role-template-manage-plugins", "role-template-manage-themes" ]
 rules:
-  - apiGroups: [ "" ]
-    resources: [ "secret" ]
-    resourceNames: [ "halo-run-app-store-pat-secret" ]
-    verbs: [ "create", "update", "get", "delete" ]
+  - apiGroups: [""]
+    resources: ["secret"]
+    resourceNames: ["halo-run-app-store-pat-secret"]
+    verbs: ["create", "update", "get", "delete"]