From e0fd305b28a7d797b092cf2a0edea07d202dafc4 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?=E5=95=8A=E5=B9=B3?= <951984189@qq.com>
Date: Tue, 23 Feb 2021 18:48:45 +0800
Subject: [PATCH] =?UTF-8?q?=E8=A7=92=E8=89=B2=E6=9D=83=E9=99=90=E8=BF=87?=
 =?UTF-8?q?=E6=BB=A4?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 src/app/modules/admin/controller/sys/role.ts | 7 ++++++-
 1 file changed, 6 insertions(+), 1 deletion(-)

diff --git a/src/app/modules/admin/controller/sys/role.ts b/src/app/modules/admin/controller/sys/role.ts
index a8449f5..15ec244 100644
--- a/src/app/modules/admin/controller/sys/role.ts
+++ b/src/app/modules/admin/controller/sys/role.ts
@@ -1,5 +1,6 @@
 import { Provide } from '@midwayjs/decorator';
 import { CoolController, BaseController } from 'midwayjs-cool-core';
+import { Context } from 'vm';
 import { AdminSysRoleEntity } from '../../entity/sys/role';
 
 /**
@@ -11,9 +12,13 @@ import { AdminSysRoleEntity } from '../../entity/sys/role';
   entity: AdminSysRoleEntity,
   pageQueryOp: {
     keyWordLikeFields: ['name', 'label'],
-    where: (async () => {
+    where: (async (ctx: Context) => {
+      const { userId, roleIds, role } = ctx.admin;
       return [
+        // 超级管理员的角色不展示
         ['label != :label', { label: 'admin' }],
+        // 如果不是超管，只能看到自己新建的或者自己有的角色
+        ['(userId=:userId or id in (:roleIds))', { userId, roleIds }, role != 'admin']
       ]
     })
   }