klinsmaya/SQLBot
1
0
Fork 0
mirror of https://gh-proxy.org/https://github.com/klinsmaya/SQLBot.git synced 2026-11-08 01:06:59 +08:00
Code Issues Packages Projects Releases Wiki Activity

fix: Fix the privilege escalation vulnerability in system variables

Browse Source
This commit is contained in:
junjun
2026-06-08 16:33:34 +08:00
parent 316450b027
commit 81c8acda91
1 changed files with 2 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
backend/apps/system/api/variable_api.py
+2
View File
@@ -27,11 +27,13 @@ async def delete_variable(session: SessionDep, ids: List[int]):
@router.post("/listAll",response_model=None, summary=f"{PLACEHOLDER_PREFIX}variable_list")
@require_permissions(permission=SqlbotPermission(role=['ws_admin']))
async def list_all_data(session: SessionDep, trans: Trans, variable: SystemVariable = None):
return list_all(session, trans, variable)
@router.post("/listPage/{pageNum}/{pageSize}",response_model=None, summary=f"{PLACEHOLDER_PREFIX}variable_page")
@require_permissions(permission=SqlbotPermission(role=['ws_admin']))
async def pager(session: SessionDep, trans: Trans, pageNum: int, pageSize: int,
variable: SystemVariable = None):
return await list_page(session, trans, pageNum, pageSize, variable)