From 2af3240e2d4c56eeb9ddc4ccf39a760660116df6 Mon Sep 17 00:00:00 2001
From: song-cc-rock <changchang.song@fit2cloud.com>
Date: Tue, 23 Apr 2024 13:42:36 +0800
Subject: [PATCH] =?UTF-8?q?fix(=E7=BC=BA=E9=99=B7=E7=AE=A1=E7=90=86):=20?=
 =?UTF-8?q?=E8=AF=84=E8=AE=BA=E5=AF=8C=E6=96=87=E6=9C=AC=E5=8F=8A=E5=90=8C?=
 =?UTF-8?q?=E6=AD=A5=E6=8C=89=E9=92=AE=E6=9D=83=E9=99=90=E6=8E=A7=E5=88=B6?=
 =?UTF-8?q?=E9=97=AE=E9=A2=98?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

--bug=1039918 --user=宋昌昌 【缺陷管理】评论缺陷-粘贴图片到输入框，会变成无权限页面 https://www.tapd.cn/55049933/s/1506320
--bug=1039873 --user=宋昌昌 【缺陷管理】只有缺陷管理的查询权限，缺陷管理页面有同步缺陷按钮，并且按钮一直是加载状态 https://www.tapd.cn/55049933/s/1506459
---
 .../bug/controller/BugAttachmentController.java            | 3 +--
 frontend/src/api/requrls/bug-management.ts                 | 2 +-
 frontend/src/views/bug-management/index.vue                | 7 ++++++-
 3 files changed, 8 insertions(+), 4 deletions(-)

diff --git a/backend/services/bug-management/src/main/java/io/metersphere/bug/controller/BugAttachmentController.java b/backend/services/bug-management/src/main/java/io/metersphere/bug/controller/BugAttachmentController.java
index aa980027b4..17e295c6a6 100644
--- a/backend/services/bug-management/src/main/java/io/metersphere/bug/controller/BugAttachmentController.java
+++ b/backend/services/bug-management/src/main/java/io/metersphere/bug/controller/BugAttachmentController.java
@@ -138,10 +138,9 @@ public class BugAttachmentController {
         return bugAttachmentService.upgrade(request, SessionUtils.getUserId());
     }
 
-    // 富文本相关接口
     @PostMapping("/upload/md/file")
     @Operation(summary = "缺陷管理-富文本附件-上传")
-    @RequiresPermissions(logical = Logical.OR, value = {PermissionConstants.PROJECT_BUG_ADD, PermissionConstants.PROJECT_BUG_UPDATE})
+    @RequiresPermissions(logical = Logical.OR, value = {PermissionConstants.PROJECT_BUG_ADD, PermissionConstants.PROJECT_BUG_UPDATE, PermissionConstants.PROJECT_BUG_COMMENT})
     public String upload(@RequestParam("file") MultipartFile file) throws Exception {
         return bugAttachmentService.uploadMdFile(file);
     }
diff --git a/frontend/src/api/requrls/bug-management.ts b/frontend/src/api/requrls/bug-management.ts
index 6406595e80..543bb16ce9 100644
--- a/frontend/src/api/requrls/bug-management.ts
+++ b/frontend/src/api/requrls/bug-management.ts
@@ -47,7 +47,7 @@ export const deleteFileOrCancelAssociationUrl = '/bug/attachment/delete';
 // 获取附件列表
 export const getAttachmentListUrl = '/bug/attachment/list/';
 // 富文本编辑器上传图片
-export const editorUploadFileUrl = '/attachment/upload/temp/file';
+export const editorUploadFileUrl = '/bug/attachment/upload/md/file';
 
 // 获取回收站列表
 export const getRecycleListUrl = '/bug/trash/page';
diff --git a/frontend/src/views/bug-management/index.vue b/frontend/src/views/bug-management/index.vue
index ae51a48474..4d9ad38bf6 100644
--- a/frontend/src/views/bug-management/index.vue
+++ b/frontend/src/views/bug-management/index.vue
@@ -15,7 +15,12 @@
             <a-button v-permission="['PROJECT_BUG:READ+ADD']" type="primary" @click="handleCreate"
               >{{ t('bugManagement.createBug') }}
             </a-button>
-            <a-button v-if="currentPlatform !== 'Local'" :loading="!isComplete" type="outline" @click="handleSync"
+            <a-button
+              v-if="currentPlatform !== 'Local'"
+              v-permission="['PROJECT_BUG:READ+ADD']"
+              :loading="!isComplete"
+              type="outline"
+              @click="handleSync"
               >{{ t('bugManagement.syncBug') }}
             </a-button>
           </div>