更新

server/app/adminapi/controller/UploadController.php

@@ -15,6 +15,7 @@
 namespace app\adminapi\controller;
 
 
+use app\common\cache\AdminAuthCache;
 use app\common\service\DirectUploadService;
 use app\common\service\UploadService;
 use Exception;
@@ -86,7 +87,12 @@ class UploadController extends BaseAdminController
     {
         $type = trim((string)$this->request->post('type', 'video'));
         try {
-            $result = DirectUploadService::issueCredentials($type);
+            $this->assertDirectUploadPermission($type);
+            $result = DirectUploadService::issueCredentials(
+                $type,
+                $this->adminId,
+                trim((string)$this->request->post('name', ''))
+            );
             return $this->success('ok', $result);
         } catch (Exception $e) {
             return $this->fail($e->getMessage());
@@ -100,8 +106,10 @@ class UploadController extends BaseAdminController
     public function ossConfirm()
     {
         try {
+            $type = trim((string)$this->request->post('type', 'video'));
+            $this->assertDirectUploadPermission($type);
             $result = DirectUploadService::confirm([
-                'type' => trim((string)$this->request->post('type', 'video')),
+                'type' => $type,
                 'key' => trim((string)$this->request->post('key', '')),
                 'name' => trim((string)$this->request->post('name', '')),
                 'size' => (int)$this->request->post('size', 0),
@@ -115,4 +123,22 @@ class UploadController extends BaseAdminController
         }
     }
 
+    /**
+     * 安装包属于发布能力，不能沿用普通素材上传的“登录即放行”。
+     * @throws Exception
+     */
+    private function assertDirectUploadPermission(string $type): void
+    {
+        if ($type !== DirectUploadService::TYPE_DESKTOP_PACKAGE
+            || (int)($this->adminInfo['root'] ?? 0) === 1) {
+            return;
+        }
+
+        $permissions = (new AdminAuthCache($this->adminId))->getAdminUri() ?? [];
+        $permissions = array_map('strtolower', $permissions);
+        if (!in_array('setting.desktop_workstation/setconfig', $permissions, true)) {
+            throw new Exception('权限不足，无法上传医生工作站安装包');
+        }
+    }
+
 }