klinsmaya/SQLBot
1
0
Fork 0
mirror of https://gh-proxy.org/https://github.com/klinsmaya/SQLBot.git synced 2026-11-08 01:06:59 +08:00
Code Issues Packages Projects Releases Wiki Activity

fix: Fix the privilege escalation vulnerability in system variables

Browse Source
This commit is contained in:
junjun
2026-06-08 15:26:55 +08:00
parent 5d5a92a526
commit 80dc9a3aa8
1 changed files with 0 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
backend/apps/system/api/variable_api.py
-2
View File
@@ -27,13 +27,11 @@ async def delete_variable(session: SessionDep, ids: List[int]):
@router.post("/listAll",response_model=None, summary=f"{PLACEHOLDER_PREFIX}variable_list")
@require_permissions(permission=SqlbotPermission(role=['admin']))
async def list_all_data(session: SessionDep, trans: Trans, variable: SystemVariable = None):
return list_all(session, trans, variable)
@router.post("/listPage/{pageNum}/{pageSize}",response_model=None, summary=f"{PLACEHOLDER_PREFIX}variable_page")
@require_permissions(permission=SqlbotPermission(role=['admin']))
async def pager(session: SessionDep, trans: Trans, pageNum: int, pageSize: int,
variable: SystemVariable = None):
return await list_page(session, trans, pageNum, pageSize, variable)