rbac

internal/handler/admin/user/user_handler.go

@@ -6,6 +6,7 @@ import (
 
 	"github.com/gin-gonic/gin"
 
+	"portal-mini-go/internal/middleware"
 	"portal-mini-go/internal/pkg/errors"
 	"portal-mini-go/internal/pkg/response"
 	usersvc "portal-mini-go/internal/service/admin/user"
@@ -115,13 +116,14 @@ func parseID(c *gin.Context) (uint64, bool) {
 	return id, true
 }
 
-// Register 注册后台用户管理路由。g 已带 /api/admin 前缀与 JWT 鉴权中间件。
+// Register 注册后台用户管理路由。g 已带 /api/admin 前缀与 JWT 鉴权中间件；
+// 读接口挂 user:view，写接口挂 user:manage。
 func Register(g *gin.RouterGroup, h *Handler) {
 	rg := g.Group("/users")
 	{
-		rg.GET("", h.List)
-		rg.GET("/:id", h.Get)
-		rg.PUT("/:id", h.Update)
-		rg.POST("/:id/status", h.SetStatus)
+		rg.GET("", middleware.RequirePerm(middleware.PermUserView), h.List)
+		rg.GET("/:id", middleware.RequirePerm(middleware.PermUserView), h.Get)
+		rg.PUT("/:id", middleware.RequirePerm(middleware.PermUserManage), h.Update)
+		rg.POST("/:id/status", middleware.RequirePerm(middleware.PermUserManage), h.SetStatus)
 	}
 }