禁止欢迎的权限

4 years ago · e98cc3dc3c
parent 701a5488d7
commit e98cc3dc3c
1 changed files with 2 additions and 2 deletions
--- a/router/api.go
+++ b/router/api.go
@ -61,9 +61,9 @@ func InitApiRouter(engine *gin.Engine) {
 	engine.GET("/about", controller.GetAbout)
 	engine.POST("/about", middleware.JwtApiMiddleware, middleware.RbacAuth, controller.PostAbout)
 	engine.GET("/notice", middleware.SetLanguage, controller.GetNotice)
-	engine.POST("/notice", middleware.JwtApiMiddleware, controller.PostNotice)
+	engine.POST("/notice", middleware.JwtApiMiddleware, middleware.RbacAuth, controller.PostNotice)
 	engine.DELETE("/notice", middleware.JwtApiMiddleware, controller.DelNotice)
-	engine.POST("/notice_save", middleware.JwtApiMiddleware, controller.PostNoticeSave)
+	engine.POST("/notice_save", middleware.JwtApiMiddleware, middleware.RbacAuth, controller.PostNoticeSave)
 	engine.GET("/notices", middleware.JwtApiMiddleware, controller.GetNotices)
 	engine.POST("/ipblack", middleware.JwtApiMiddleware, controller.PostIpblack)
 	engine.DELETE("/ipblack", middleware.JwtApiMiddleware, controller.DelIpblack)