chore: 禁止普通用户使用不安全插件，比如复制到本机、自定义js脚本等

packages/ui/certd-server/src/plugins/plugin-host/plugin/copy-to-local/index.ts

@@ -8,7 +8,7 @@ import path from 'path';
   name: 'CopyToLocal',
   title: '复制到本机',
   icon: 'solar:copy-bold-duotone',
-  desc: '实际上是复制证书到docker容器内的某个路径，需要做目录映射到宿主机',
+  desc: '【仅管理员使用】实际上是复制证书到docker容器内的某个路径，需要做目录映射到宿主机',
   group: pluginGroups.host.key,
   default: {
     strategy: {
@@ -114,6 +114,10 @@ export class CopyCertToLocalPlugin extends AbstractTaskPlugin {
     fs.copyFileSync(srcFile, destFile);
   }
   async execute(): Promise<void> {
+    if (!this.isAdmin()) {
+      throw new Error('只有管理员才能运行此任务');
+    }
+
     let { crtPath, keyPath, icPath, pfxPath, derPath } = this;
     const certReader = new CertReader(this.cert);
 

packages/ui/certd-server/src/plugins/plugin-other/plugins/plugin-restart.ts

@@ -4,7 +4,7 @@ import { AbstractTaskPlugin, IsTaskPlugin, pluginGroups, RunStrategy, TaskInput
   name: 'RestartCertd',
   title: '重启Certd',
   icon: 'mdi:restart',
-  desc: '延迟一定时间后自动杀死自己，然后通过Docker来自动重启',
+  desc: '【仅管理员】延迟一定时间后自动杀死自己，然后通过Docker来自动重启',
   group: pluginGroups.other.key,
   default: {
     strategy: {
@@ -25,6 +25,9 @@ export class RestartCertdPlugin extends AbstractTaskPlugin {
   delay = 30;
   async onInstance() {}
   async execute(): Promise<void> {
+    if (!this.isAdmin()) {
+      throw new Error('只有管理员才能运行此任务');
+    }
     this.logger.info(`Certd 将在 ${this.delay} 秒后关闭`);
     setTimeout(() => {
       this.logger.info('重启 Certd');

packages/ui/certd-server/src/plugins/plugin-other/plugins/plugin-script.ts

@@ -9,8 +9,8 @@ export type CustomScriptContext = {
 @IsTaskPlugin({
   name: 'CustomScript',
   title: '自定义js脚本',
-  icon:"ri:javascript-line",
-  desc: '测试',
+  icon: 'ri:javascript-line',
+  desc: '【仅管理员】运行自定义js脚本执行',
   group: pluginGroups.other.key,
   default: {
     strategy: {
@@ -45,6 +45,9 @@ export class CustomScriptPlugin extends AbstractTaskPlugin {
 
   async onInstance() {}
   async execute(): Promise<void> {
+    if (!this.isAdmin()) {
+      throw new Error('只有管理员才能运行此任务');
+    }
     this.logger.info('执行自定义脚本:\n', this.script);
     const ctx: CustomScriptContext = {
       CertReader,