ow

CloudBuilder/CloudBuilder.Master.Service/FamilyPersonService.auto.cs

@@ -145,6 +145,13 @@ namespace CloudBuilder.Master.Service
 
             ObjectCopyHelper.Copy(data.FamilyPerson, d);
 
+            var has = new FamilyTreePermissionHelper(service).HasPermission(d.TreeId, d.PersonId);
+
+            if (!has)
+            {
+                throw new ValidatedException("您没有修改权限.");
+            }
+
             repository.UpdateNow(d);
 
             return FindByKey(data.FamilyPerson.PersonId);

CloudBuilder/CloudBuilder.Master.Service/FamilyTreeService.auto.cs

@@ -490,6 +490,13 @@ namespace CloudBuilder.Master.Service
 
             Validate(data.FamilyTree);
 
+            var has = new FamilyTreePermissionHelper(service).HasPermission(d.TreeId, d.AncestorPersonId);
+
+            if (!has)
+            {
+                throw new ValidatedException("您没有修改权限.");
+            }
+
             ObjectCopyHelper.Copy(data.FamilyTree, d);
 
             repository.UpdateNow(d);
@@ -517,6 +524,14 @@ namespace CloudBuilder.Master.Service
         {
             var ent = repository.DetachedEntities.Where(x => x.TreeId == key).FirstOrDefault()!;
             if (ent == null) return;
+
+            var has = new FamilyTreePermissionHelper(service).HasPermission(ent.TreeId, ent.AncestorPersonId);
+
+            if(!has)
+            {
+                throw new ValidatedException("您没有删除权限.");
+            }
+
             repository.DeleteNow(ent);
 
             IRepository<FamilyPersonEntity> repositoryPerson = repository.GetRepository<IRepository<FamilyPersonEntity>>();