From 58ff0840ab115f3b1fb0e485ffb602962c17bf7d Mon Sep 17 00:00:00 2001
From: taojinlong <jinlong@fit2cloud.com>
Date: Thu, 1 Aug 2024 18:36:56 +0800
Subject: [PATCH] =?UTF-8?q?fix:=20=E3=80=90=E4=BB=AA=E8=A1=A8=E6=9D=BF?=
 =?UTF-8?q?=E3=80=91=E7=AD=9B=E9=80=89=E7=BB=84=E4=BB=B6=E6=9C=AA=E5=8F=97?=
 =?UTF-8?q?=E6=95=B0=E6=8D=AE=E9=9B=86=E6=9D=83=E9=99=90=E5=BD=B1=E5=93=8D?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 .../dataset/impl/direct/DirectFieldService.java    | 14 +++++++++++++-
 1 file changed, 13 insertions(+), 1 deletion(-)

diff --git a/core/backend/src/main/java/io/dataease/service/dataset/impl/direct/DirectFieldService.java b/core/backend/src/main/java/io/dataease/service/dataset/impl/direct/DirectFieldService.java
index bdb0ee9102..bbd73f6a19 100644
--- a/core/backend/src/main/java/io/dataease/service/dataset/impl/direct/DirectFieldService.java
+++ b/core/backend/src/main/java/io/dataease/service/dataset/impl/direct/DirectFieldService.java
@@ -1,10 +1,14 @@
 package io.dataease.service.dataset.impl.direct;
 
 import com.google.gson.Gson;
+import io.dataease.auth.entity.SysUserEntity;
+import io.dataease.auth.service.AuthUserService;
 import io.dataease.commons.model.BaseTreeNode;
+import io.dataease.commons.utils.AuthUtils;
 import io.dataease.commons.utils.BeanUtils;
 import io.dataease.commons.utils.LogUtil;
 import io.dataease.commons.utils.TreeUtils;
+import io.dataease.dto.dataset.DataSetTableDTO;
 import io.dataease.dto.dataset.DataSetTableUnionDTO;
 import io.dataease.plugins.common.dto.dataset.DataTableInfoDTO;
 import io.dataease.dto.dataset.DeSortDTO;
@@ -53,6 +57,8 @@ public class DirectFieldService implements DataSetFieldService {
     private EngineService engineService;
     @Resource
     private PermissionsTreeService permissionsTreeService;
+    @Resource
+    private AuthUserService authUserService;
 
     @Override
     public List<Object> fieldValues(String fieldId, Long userId, Boolean userPermissions, Boolean rowAndColumnMgm) throws Exception {
@@ -107,7 +113,13 @@ public class DirectFieldService implements DataSetFieldService {
 
         DatasetTable datasetTable = dataSetTableService.get(field.getTableId());
         if (ObjectUtils.isEmpty(datasetTable) || StringUtils.isEmpty(datasetTable.getName())) return null;
-
+        SysUserEntity userEntity = userId != null ? authUserService.getUserById(userId) : AuthUtils.getUser();
+        if (userEntity != null && !userEntity.getIsAdmin()) {
+            DataSetTableDTO withPermission = dataSetTableService.getWithPermission(datasetTable.getId(), userEntity.getUserId());
+            if (ObjectUtils.isEmpty(withPermission.getPrivileges()) || !withPermission.getPrivileges().contains("use")) {
+                DataEaseException.throwException(Translator.get("i18n_dataset_no_permission") + String.format(":table name [%s]", withPermission.getName()));
+            }
+        }
         DatasetTableField datasetTableField = DatasetTableField.builder().tableId(field.getTableId()).checked(Boolean.TRUE).build();
         List<DatasetTableField> fields = dataSetTableFieldsService.list(datasetTableField);