动态修改api权限和api的参数权限
更多操作看Dashboard
可使用RequestBody获得,或者new AuthzModifier();
共的13个字段:1.operate 2.target 3.method, 4.api 5.value 6.index 7.range 8.resources 9.className 10.condition 11.argsMap 12.role 13.permission
operate 支持四种操作:
ADD
DELETE(DEL)
MODIFY(UPDATE)
GET(READ)
target 有3种类型 api,路径参数,请求参数
其中值一共有5钟:
API
PATH_VARIABLE_ROLE(PATH_VARIABLE_ROLE)
PATH_VARIABLE_PERMISSION(PATH_VAR_PERMISSION)
REQUEST_PARAM_ROLE(PARAM_ROLE)
REQUEST_PARAM_PERMISSION(PARAM_PERMISSION)
example 对于api的相关操作:
对于api的添加操作:
{
"operate": "add",
"target": "api",
"method": "get",
"api": "/test/role-ada"
"role": {
"require": ["admin","zxc"],
"exclude": ["small-black,dog", "cat","apple"]
},
"permission": {
...
}
}
对于api的删除操作:
{
"operate": "del",
"target": "api",
"method": "get",
"api": "/test/role-ada"
}
对于api的修改操作:(缺失为不修改)
{
"operate": "modify",
"target": "api",
"method": "get",
"api": "/test/role-ada",
"role": {
"require": ["admin","zxc"],
"exclude": ["small-black,dog", "cat","apple"]
},
"permission": {
...
}
}
对于api的查看操作:
{
"operate": "get",
"target": "api",
"method": "get",
"api": "/test/role-ada"
}
example 对于参数的相关操作:
对于参数的添加操作:
1、在/test/role-ada接口上参数名为id添加限制权限限制。