From 0d1bf7610f2e5e12083f37d6b888163f4c35dc6a Mon Sep 17 00:00:00 2001
From: WangXu10 <xu.wang@fit2cloud.com>
Date: Wed, 28 Jun 2023 15:21:52 +0800
Subject: [PATCH] =?UTF-8?q?fix(=E7=B3=BB=E7=BB=9F=E8=AE=BE=E7=BD=AE):=20?=
 =?UTF-8?q?=E6=96=B0=E5=A2=9E=E6=9C=AA=E8=AE=BE=E7=BD=AE=E4=B8=AA=E4=BA=BA?=
 =?UTF-8?q?=E8=AE=BE=E7=BD=AE=E4=B8=8E=E4=BF=AE=E6=94=B9=E5=AF=86=E7=A0=81?=
 =?UTF-8?q?=E6=9D=83=E9=99=90,=E7=9B=B4=E6=8E=A5=E9=80=9A=E8=BF=87?=
 =?UTF-8?q?=E8=B7=AF=E5=BE=84=E8=AE=BF=E9=A1=B5=E9=9D=A2,=E4=BE=9D?=
 =?UTF-8?q?=E7=84=B6=E5=8F=AF=E4=BB=A5=E4=BF=AE=E6=94=B9=E7=9A=84=E6=9D=83?=
 =?UTF-8?q?=E9=99=90=E6=8E=A7=E5=88=B6?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

--bug=1027369 --user=王旭 【系统设置】个人设置页面未受权限控制 https://www.tapd.cn/55049933/s/1387573
---
 .../src/components/personal/PersonSetting.vue | 25 +++++++++++--------
 1 file changed, 14 insertions(+), 11 deletions(-)

diff --git a/framework/sdk-parent/frontend/src/components/personal/PersonSetting.vue b/framework/sdk-parent/frontend/src/components/personal/PersonSetting.vue
index 8310b77848..98d10f1ac6 100644
--- a/framework/sdk-parent/frontend/src/components/personal/PersonSetting.vue
+++ b/framework/sdk-parent/frontend/src/components/personal/PersonSetting.vue
@@ -23,9 +23,9 @@
         <el-table-column :label="$t('commons.operating')">
           <template v-slot:default="scope">
             <div>
-              <ms-table-operator-button :tip="$t('member.edit_information')" icon="el-icon-edit"
+              <ms-table-operator-button v-permission="['PERSONAL_INFORMATION:READ+EDIT']" :tip="$t('member.edit_information')" icon="el-icon-edit"
                                         type="primary" @exec="edit(scope.row)"/>
-              <ms-table-operator-button :tip="$t('member.edit_password')" icon="el-icon-s-tools" v-if="isLocalUser"
+              <ms-table-operator-button :tip="$t('member.edit_password')" icon="el-icon-s-tools" v-if="isLocalUser && hasPermission('PERSONAL_INFORMATION:READ+EDIT_PASSWORD')"
                                         type="success" @exec="editPassword(scope.row)"/>
             </div>
           </template>
@@ -52,16 +52,17 @@
           <el-input v-model="form.phone" autocomplete="off"/>
         </el-form-item>
       </el-form>
-
-      <div v-for="config in platformAccountConfigs" :key="config.key">
-        <platform-account-config
-          :config="config"
-          :account-config="currentPlatformInfo"
-          v-if="showPlatformConfig(config.key)"
-        />
+      <div v-permission="['PERSONAL_INFORMATION:READ+THIRD_ACCOUNT']">
+        <div v-for="config in platformAccountConfigs" :key="config.key">
+          <platform-account-config
+            :config="config"
+            :account-config="currentPlatformInfo"
+            v-if="showPlatformConfig(config.key)"
+          />
+        </div>
+        <tapd-user-info @auth="handleAuth" v-if="hasTapd" :data="currentPlatformInfo"/>
+        <azure-devops-user-info @auth="handleAuth" v-if="hasAzure" :data="currentPlatformInfo"/>
       </div>
-      <tapd-user-info @auth="handleAuth" v-if="hasTapd" :data="currentPlatformInfo"/>
-      <azure-devops-user-info @auth="handleAuth" v-if="hasAzure" :data="currentPlatformInfo"/>
       <template v-slot:footer>
         <ms-dialog-footer
           @cancel="updateVisible = false"
@@ -108,6 +109,7 @@ import {handleAuth as _handleAuth, updateInfo, updatePassword} from "../../api/u
 import {getPlatformAccountInfo} from "../../api/platform-plugin";
 import {ISSUE_PLATFORM_OPTION} from "../../utils/table-constants";
 import PlatformAccountConfig from "./PlatformAccountConfig";
+import { hasPermission } from '../../utils/permission';
 
 const userStore = useUserStore();
 
@@ -205,6 +207,7 @@ export default {
     }
   },
   methods: {
+    hasPermission,
     currentUser: () => {
       return getCurrentUser();
     },