fix : permission error

Gsangu · Gsangu · commit 885b6e928786 · 2018-12-29T09:22:40.000+08:00
diff --git a/app/Http/Middleware/CheckRole.php b/app/Http/Middleware/CheckRole.php
@@ -22,13 +22,16 @@ public function handle($request, Closure $next, $role)
     if (!isset($user['roles'])) {
       throw new UnauthorizedHttpException('jwt-auth', '登录失效');
     }
-    $roles = explode('|', $role);
-    foreach ($roles as $role) {
-      if (!in_array($role, $user['roles']['data'])) {
-        $this->saveSystemLogs($request);
-        return $next($request);
+    if ($role) {
+      $roles = explode('|', $role);
+      foreach ($roles as $role) {
+        if (!in_array($role, $user['roles']['data'])) {
+          $this->saveSystemLogs($request);
+          return $next($request);
+        }
       }
     }
+
     return response()->json(['err' => '权限不足']);
   }
 

Original file line number	Diff line number	Diff line change
`@@ -22,13 +22,16 @@ public function handle($request, Closure $next, $role)`
`22`	`22`	`if (!isset($user['roles'])) {`
`23`	`23`	`throw new UnauthorizedHttpException('jwt-auth', '登录失效');`
`24`	`24`	`}`
`25`		`- $roles = explode('\|', $role);`
`26`		`- foreach ($roles as $role) {`
`27`		`- if (!in_array($role, $user['roles']['data'])) {`
`28`		`- $this->saveSystemLogs($request);`
`29`		`- return $next($request);`
	`25`	`+ if ($role) {`
	`26`	`+ $roles = explode('\|', $role);`
	`27`	`+ foreach ($roles as $role) {`
	`28`	`+ if (!in_array($role, $user['roles']['data'])) {`
	`29`	`+ $this->saveSystemLogs($request);`
	`30`	`+ return $next($request);`
	`31`	`+ }`
`30`	`32`	`}`
`31`	`33`	`}`
	`34`	`+`
`32`	`35`	`return response()->json(['err' => '权限不足']);`
`33`	`36`	`}`
`34`	`37`