rbac

internal/handler/admin/miniapp/miniapp_handler.go

@@ -6,6 +6,7 @@ import (
 
 	"github.com/gin-gonic/gin"
 
+	"portal-mini-go/internal/middleware"
 	"portal-mini-go/internal/pkg/errors"
 	"portal-mini-go/internal/pkg/response"
 	miniappsvc "portal-mini-go/internal/service/admin/miniapp"
@@ -106,14 +107,15 @@ func parseID(c *gin.Context) (uint64, bool) {
 	return id, true
 }
 
-// Register 注册后台小程序管理路由。g 已带 /api/admin 前缀与 JWT 鉴权中间件。
+// Register 注册后台小程序管理路由。g 已带 /api/admin 前缀与 JWT 鉴权中间件；
+// 读接口挂 mini:view，写接口挂 mini:manage。
 func Register(g *gin.RouterGroup, h *Handler) {
 	rg := g.Group("/miniapps")
 	{
-		rg.POST("", h.Create)
-		rg.PUT("/:id", h.Update)
-		rg.GET("/:id", h.Get)
-		rg.GET("", h.List)
-		rg.DELETE("/:id", h.Delete)
+		rg.POST("", middleware.RequirePerm(middleware.PermMiniManage), h.Create)
+		rg.PUT("/:id", middleware.RequirePerm(middleware.PermMiniManage), h.Update)
+		rg.GET("/:id", middleware.RequirePerm(middleware.PermMiniView), h.Get)
+		rg.GET("", middleware.RequirePerm(middleware.PermMiniView), h.List)
+		rg.DELETE("/:id", middleware.RequirePerm(middleware.PermMiniManage), h.Delete)
 	}
 }