fix: system privileges user cannot access system console

yunionio · May 21, 2020 · 29283ff · 29283ff
1 parent 9b37c10
commit 29283ff
Showing 1 changed file with 3 additions and 2 deletions.
diff --git a/pkg/apigateway/handler/auth.go b/pkg/apigateway/handler/auth.go
@@ -605,6 +605,7 @@ func (this *projectRoles) add(roleId, roleName string) {
 
 func (this *projectRoles) getToken(scope rbacutils.TRbacScope, user, userId, domain, domainId string, ip string) mcclient.TokenCredential {
 	return &mcclient.SSimpleToken{
+		Token:           "faketoken",
 		Domain:          domain,
 		DomainId:        domainId,
 		User:            user,
@@ -644,9 +645,9 @@ func (this *projectRoles) json(user, userId, domain, domainId string, ip string)
 	}
 	obj.Add(roles, "roles")
 	for _, scope := range []rbacutils.TRbacScope{
-		rbacutils.ScopeSystem,
-		rbacutils.ScopeDomain,
 		rbacutils.ScopeProject,
+		rbacutils.ScopeDomain,
+		rbacutils.ScopeSystem,
 	} {
 		token := this.getToken(scope, user, userId, domain, domainId, ip)
 		matches := policy.PolicyManager.MatchedPolicyNames(scope, token)