feat:update 3 4
This commit is contained in:
@@ -0,0 +1,28 @@
|
||||
# 阶段 Review 报告
|
||||
|
||||
## Review 输入
|
||||
|
||||
- RBAC 权限矩阵:
|
||||
- 权限控制方案:
|
||||
- 状态流转表:
|
||||
- 非法流转清单:
|
||||
- 审计日志 SOP:
|
||||
- 异常态清单:
|
||||
- 看板指标字典:
|
||||
- 看板接口验收记录:
|
||||
|
||||
## 问题清单
|
||||
|
||||
| 等级 | 模块 | 问题 | 触发规则 | 风险 | 修复建议 | 验收 |
|
||||
| --- | --- | --- | --- | --- | --- | --- |
|
||||
| P1 | 权限 | 删除接口只隐藏按钮,后端缺少权限校验 | 前端按钮不是安全边界 | 可绕过前端删除工单 | 后端补权限校验 | 无权限账号请求返回 403 |
|
||||
|
||||
## 不确定点
|
||||
|
||||
| 不确定点 | 影响 | 需要谁确认 |
|
||||
| --- | --- | --- |
|
||||
|
||||
## 结论
|
||||
|
||||
通过 / 有条件通过 / 不通过
|
||||
|
||||
Reference in New Issue
Block a user