From 61a2e207987edf188c384cef627f8334cd0fd09b Mon Sep 17 00:00:00 2001
From: ssongliu <sloooop1x@gmail.com>
Date: Tue, 26 May 2026 18:34:09 +0800
Subject: [PATCH] fix: handle node admin action permissions (#12857)

---
 frontend/src/components/complex-table/index.vue | 11 ++++++++++-
 frontend/src/utils/permission.ts                | 10 +++++++++-
 2 files changed, 19 insertions(+), 2 deletions(-)

diff --git a/frontend/src/components/complex-table/index.vue b/frontend/src/components/complex-table/index.vue
index 896621c54..dab7f4496 100644
--- a/frontend/src/components/complex-table/index.vue
+++ b/frontend/src/components/complex-table/index.vue
@@ -76,6 +76,7 @@
 <script setup lang="ts">
 import { ref, computed, onMounted } from 'vue';
 import { useGlobalStore } from '@/composables/useGlobalStore';
+import { hasManagePermissionAccess, hasPermissionAccess } from '@/utils/permission';
 const slots = useSlots();
 
 const { isMobile, openMenuTabs } = useGlobalStore();
@@ -164,7 +165,15 @@ const closeRightClick = () => {
 };
 const disabled = computed(() => {
     return function (btn: any) {
-        return typeof btn.disabled === 'function' ? btn.disabled(rightClick.value.currentRow) : btn.disabled;
+        let permissionDisabled = false;
+        if (btn.permission === true) {
+            permissionDisabled = !hasManagePermissionAccess();
+        } else if (btn.permission !== undefined) {
+            permissionDisabled = !hasPermissionAccess(btn.permission);
+        }
+        const buttonDisabled =
+            typeof btn.disabled === 'function' ? btn.disabled(rightClick.value.currentRow) : btn.disabled;
+        return permissionDisabled || buttonDisabled;
     };
 });
 const visibleRightButtons = computed(() => {
diff --git a/frontend/src/utils/permission.ts b/frontend/src/utils/permission.ts
index cdb409f82..5928b10ee 100644
--- a/frontend/src/utils/permission.ts
+++ b/frontend/src/utils/permission.ts
@@ -1,6 +1,6 @@
 import router from '@/routers';
 import { GlobalStore } from '@/store';
-import { normalizeToManageCode } from '@/utils/permission-codes';
+import { isMasterOnlyPermissionCode, normalizeToManageCode } from '@/utils/permission-codes';
 
 export type PermissionBindingValue = string | string[] | undefined;
 export type PermissionMode = 'manage' | 'view';
@@ -53,6 +53,14 @@ const hasPermissionAccessByMode = (mode: PermissionMode, value?: PermissionBindi
     if (normalizedPermissions.length === 0) {
         return globalStore.isAdmin || globalStore.isNodeAdmin;
     }
+    if (
+        mode === 'manage' &&
+        globalStore.isNodeAdmin &&
+        !globalStore.isMaster &&
+        normalizedPermissions.some((permission) => !isMasterOnlyPermissionCode(permission))
+    ) {
+        return true;
+    }
     return normalizedPermissions.some((permission) => globalStore.hasPermission(permission));
 };