附件和流程补充权限控制

src/Hotline.Api/Controllers/FileController.cs

@@ -43,7 +43,7 @@ namespace Hotline.Api.Controllers
 		/// </summary>
 		/// <param name="dto"></param>
 		/// <returns></returns>
-		//[Permission(EPermission.AddFile)]
+		[Permission(EPermission.AddFile)]
 		[HttpPost]
 		public async Task Add([FromBody] List<FileDto> dtos)
 		{
@@ -68,7 +68,7 @@ namespace Hotline.Api.Controllers
 		/// </summary>
 		/// <param name="dto"></param>
 		/// <returns></returns>
-		//[Permission(EPermission.DeleteFile)]
+		[Permission(EPermission.DeleteFile)]
 		[HttpDelete]
 		public async Task Delete([FromBody] DeleteFileDto dto)
 		{
@@ -83,7 +83,7 @@ namespace Hotline.Api.Controllers
 		/// </summary>
 		/// <param name="dto"></param>
 		/// <returns></returns>
-		//[Permission(EPermission.UpdateFile)]
+		[Permission(EPermission.UpdateFile)]
 		[HttpPut]
 		public async Task Update([FromBody] UpdateFileDto dto)
 		{
@@ -104,7 +104,7 @@ namespace Hotline.Api.Controllers
 		/// </summary>
 		/// <param name="dto"></param>
 		/// <returns></returns>
-		//[Permission(EPermission.FileList)]
+		[Permission(EPermission.FileList)]
 		[HttpGet("list")]
 		public async Task<PagedDto<File.File>> List([FromQuery] FileListDto dto)
 		{
@@ -127,7 +127,7 @@ namespace Hotline.Api.Controllers
 		/// </summary>
 		/// <param name="id"></param>
 		/// <returns></returns>
-		//[Permission(EPermission.FileEntity)]
+		[Permission(EPermission.FileEntity)]
 		[HttpGet("/{id}")]
 		public async Task<File.File> Entity(string id)
 		{

src/Hotline.Api/Controllers/WorkflowController.cs

@@ -408,7 +408,7 @@ public class WorkflowController : BaseController
     /// </summary>
     /// <param name="dto"></param>
     /// <returns></returns>
-    //[Permission(EPermission.FlowSupplement)]
+    [Permission(EPermission.FlowSupplement)]
     [HttpPost("supplement")]
     public async Task Supplement([FromBody] SupplementDto dto)
     {