fix: 角色修改 权限 控制

center-manage/app/base/controller/impl/auth/roleCtl.js

 var system = require("../../../system")
 const http = require("http")
 const querystring = require('querystring');
-var settings=require("../../../../config/settings");
+var settings = require("../../../../config/settings");
 const CtlBase = require("../../ctl.base");
 const logCtl = system.getObject("web.common.oplogCtl");
 var cacheBaseComp = null;
 class RoleCtl extends CtlBase {
   constructor() {
-    super("auth",CtlBase.getServiceName(RoleCtl));
-    this.redisClient=system.getObject("util.redisClient");
+    super("auth", CtlBase.getServiceName(RoleCtl));
+    this.redisClient = system.getObject("util.redisClient");
   }
-  async initNewInstance(pobj,queryobj, req) {
+  async initNewInstance(pobj, queryobj, req) {
     var rtn = {};
     rtn.roles = [];
     return system.getResultSuccess(rtn);
   }
-  async create(pobj,queryobj, req) {
-    let r=await super.create(pobj,queryobj, req)
+  async create(pobj, queryobj, req) {
+    let r = await super.create(pobj, queryobj, req)
     return system.getResult(r);
   }
+
+  async update(pobj, qobj, req) {
+    const up = await this.service.update(pobj);
+    return system.getResult(up);
+  }
+
+  async delete(pobj, qobj, req) {
+    const up = await this.service.delete(pobj);
+    return system.getResult(up);
+  }
 }
 module.exports = RoleCtl;

center-manage/app/base/service/impl/auth/roleSve.js

-const system=require("../../../system");
-const ServiceBase=require("../../sve.base");
-class RoleService extends ServiceBase{
-  constructor(){
-     super("auth",ServiceBase.getDaoName(RoleService));
+const system = require("../../../system");
+const ServiceBase = require("../../sve.base");
+class RoleService extends ServiceBase {
+  constructor() {
+    super("auth", ServiceBase.getDaoName(RoleService));
     //this.appDao=system.getObject("db.appDao");
   }
-  async findOneByCode(code){
-    return this.dao.model.findOne({where:{code:code}});
+  async findOneByCode(code) {
+    return this.dao.model.findOne({ where: { code: code } });
+  }
+
+  async update(qobj) {
+    const data = await this.dao.model.findOne({
+      where: {
+        company_id: Number(qobj.company_id),
+        id: qobj.id
+      }
+    })
+    if (!data) {
+      throw new Error("无权限修改")
+    }
+    return await this.dao.update(qobj);
+  }
+
+  async delete(qobj) {
+    const data = await this.dao.model.findOne({
+      where: {
+        company_id: Number(qobj.company_id),
+        id: qobj.id
+      }
+    })
+    if (!data) {
+      throw new Error("无权限修改")
+    }
+    return await this.dao.delete(qobj);
   }
 }
-module.exports=RoleService;
+module.exports = RoleService;