update

internal/app/api/proc.go

@@ -45,12 +45,18 @@ func (p *procApi) DeleteNewProcess(ctx *gin.Context, req struct {
 func (p *procApi) KillProcess(ctx *gin.Context, req struct {
 	Uuid int `form:"uuid" binding:"required"`
 }) (err error) {
+	if !hasOprPermission(ctx, req.Uuid, eum.OperationStop) {
+		return errors.New("not permission")
+	}
 	return logic.ProcessCtlLogic.KillProcess(req.Uuid)
 }
 
 func (p *procApi) StartProcess(ctx *gin.Context, req struct {
-	Uuid int `form:"uuid" binding:"required"`
+	Uuid int `json:"uuid" binding:"required"`
 }) (err error) {
+	if !hasOprPermission(ctx, req.Uuid, eum.OperationStart) {
+		return errors.New("not permission")
+	}
 	prod, err := logic.ProcessCtlLogic.GetProcess(req.Uuid)
 	if err != nil { // 进程不存在则创建
 		proConfig, err := repository.ProcessRepository.GetProcessConfigById(req.Uuid)

internal/app/api/ws.go

@@ -3,6 +3,7 @@ package api
 import (
 	"context"
 	"errors"
+	"net/http"
 	"strconv"
 	"sync"
 	"time"
@@ -46,9 +47,15 @@ func (w *WsConnetInstance) Cancel() {
 var upgrader = websocket.Upgrader{
 	ReadBufferSize:  1024,
 	WriteBufferSize: 1024,
+	CheckOrigin: func(r *http.Request) bool {
+		return true // 允许所有跨域请求
+	},
 }
 
 func (w *wsApi) WebsocketHandle(ctx *gin.Context, req model.WebsocketHandleReq) (err error) {
+	if !hasOprPermission(ctx, req.Uuid, eum.OperationTerminal) {
+		return errors.New("not permission")
+	}
 	reqUser := getUserName(ctx)
 	proc, err := logic.ProcessCtlLogic.GetProcess(req.Uuid)
 	if err != nil {