Merge pull request #193 from longguikeji/zzr/user_perm

fix(flush perm): 修复用户权限穿透问题
longguikeji · Jul 13, 2020 · e6b6740 · e6b6740
2 parents 612937a + 4dc9e2c
commit e6b6740
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/scripts/flush_perm.py b/scripts/flush_perm.py
@@ -147,7 +147,7 @@ def flush_user_perm():
             SET
                 up.group_perm_value = true
             WHERE
-                np.value = true
+                np.value = true and up.perm_id = np.perm_id
         ''')
 
         cursor.execute(f'''
@@ -165,7 +165,7 @@ def flush_user_perm():
             SET
                 up.dept_perm_value = true
             WHERE
-                np.value = true
+                np.value = true and up.perm_id = np.perm_id
         ''')
     else:
         for user in User.valid_objects.all():