Browse Source

REPORT-134241 【安全】FBP远程设计的相关接口均没有做权限校验,任意用户均可访问

fbp/release
Destiny.Lin 2 months ago
parent
commit
1aa1bf3a51
  1. 18
      designer-base/src/main/java/com/fr/design/actions/file/PreferencePane.java

18
designer-base/src/main/java/com/fr/design/actions/file/PreferencePane.java

@ -231,7 +231,6 @@ public class PreferencePane extends BasicPane {
private UICheckBox autoPushUpdateCheckBox;
private UICheckBox imageCompressPanelCheckBox;
private UICheckBox cloudAnalyticsDelayCheckBox;
private UICheckBox useRemoteAuthControlCheckBox;
private UICheckBox vcsEnableCheckBox;
private UICheckBox useVcsAutoSaveScheduleCheckBox;
@ -320,9 +319,7 @@ public class PreferencePane extends BasicPane {
// 模板预览性能
cell(createTplPreviewPane()),
// 设计器启动选项
cell(createDesignerStartupPane()),
// 远程权限控制
cell(createRemoteAuthControlPane()).with(it -> it.setVisible(WorkContext.getCurrent().isRoot()))
cell(createDesignerStartupPane())
).weight(1).getComponent();
useUniverseDBMCheckbox = new UICheckBox(i18nText("Fine-Design_Basic_Use_Universe_Database_Manager"));
JPanel adviceScrollPane = patchScroll(advancePane);
@ -357,12 +354,6 @@ public class PreferencePane extends BasicPane {
i18nText("Fine-Design_Startup_Option"));
}
private Component createRemoteAuthControlPane() {
useRemoteAuthControlCheckBox = new UICheckBox(i18nText("Fine-Design_Use_Remote_Auth_Control"));
return FineUIUtils.wrapComponentWithTitle(column(10, cell(useRemoteAuthControlCheckBox)).getComponent(),
i18nText("Fine-Design_Use_Remote_Auth"));
}
private Component createTplPreviewPane() {
imageCompressPanelCheckBox = new UICheckBox(i18nText("Fine-Design_Image_Compress"));
return FineUIUtils.wrapComponentWithTitle(column(10,
@ -975,9 +966,6 @@ public class PreferencePane extends BasicPane {
if (useOptimizedUPMCheckbox != null) {
useOptimizedUPMCheckbox.setSelected(true);
}
if (useRemoteAuthControlCheckBox != null) {
useRemoteAuthControlCheckBox.setSelected(ServerPreferenceConfig.getInstance().getUseRemoteAuthControl());
}
useUniverseDBMCheckbox.setSelected(ServerPreferenceConfig.getInstance().isUseUniverseDBM());
@ -1013,7 +1001,6 @@ public class PreferencePane extends BasicPane {
this.cloudAnalyticsDelayCheckBox.setSelected(designerEnvManager.isCloudAnalyticsDelay());
this.startupPageEnabledCheckBox.setSelected(designerEnvManager.isStartupPageEnabled());
this.useRemoteAuthControlCheckBox.setSelected(ServerPreferenceConfig.getInstance().getUseRemoteAuthControl());
}
private int chooseCase(int sign) {
@ -1149,9 +1136,6 @@ public class PreferencePane extends BasicPane {
if (useOptimizedUPMCheckbox != null) {
ServerPreferenceConfig.getInstance().setUseOptimizedUPM(useOptimizedUPMCheckbox.isSelected());
}
if (useRemoteAuthControlCheckBox != null) {
ServerPreferenceConfig.getInstance().setUseRemoteAuthControl(useRemoteAuthControlCheckBox.isSelected());
}
ServerPreferenceConfig.getInstance().setUseUniverseDBM(useUniverseDBMCheckbox.isSelected());
}

Loading…
Cancel
Save