项目未关联和已关联需求列表不受权限控制

routes/api.php

@@ -61,6 +61,8 @@ Route::middleware(['auth:sanctum','account.limit'])->group(function () {
     Route::get("folder/file-version-tree/{object_type}/{object_id}", [API\FolderController::class, "versionFileTreeByObject"]);
     Route::get("project-asset-tree/{project_id}", [API\ProjectController::class, "projectAssetTree"]);
     Route::get("project-requirementGroups-tree/{asset_id}", [API\ProjectController::class, "projectRequirementGroupsTree"]);
+    Route::get("project/{project}/requirement", [API\ProjectController::class, "requirement"]);
+    Route::get("project/{project}/not-link-asset-requirement", [API\ProjectController::class, "notLinkAssetRequirement"]);
 
     // Allow access only to admin role
     Route::middleware(['permission', 'role.super-admin', 'system.operation-log'])->group(function () {
@@ -170,10 +172,10 @@ Route::middleware(['auth:sanctum','account.limit'])->group(function () {
 
         Route::get("project/{project}/plan", [API\ProjectController::class, "plan"])
             ->name("project.plan"); //项目关联计划
-        Route::get("project/{project}/requirement", [API\ProjectController::class, "requirement"])
-            ->name("project.requirement"); //项目需求
-        Route::get("project/{project}/not-link-asset-requirement", [API\ProjectController::class, "notLinkAssetRequirement"])
-            ->name("project.not-link-asset-requirement"); //项目未关联的资产需求
+//        Route::get("project/{project}/requirement", [API\ProjectController::class, "requirement"])
+//            ->name("project.requirement"); //项目需求
+//        Route::get("project/{project}/not-link-asset-requirement", [API\ProjectController::class, "notLinkAssetRequirement"])
+//            ->name("project.not-link-asset-requirement"); //项目未关联的资产需求
 
 
         Route::patch("task/{task}/closed", [API\TaskController::class, "closed"])->name("task.closed");