针对User装饰器获取数据更进一步，直接拿user里面的数据，给一个字段给它，让它帮忙拿一下，这样就不用自己拿了。

src/core/decorators/user.decorator.ts

@@ -0,0 +1,7 @@
+import { createParamDecorator } from '@nestjs/common'
+
+export const User = createParamDecorator((data, req) => {
+    console.log('data:', data)
+    
+    return req.user[data]
+})

src/modules/posts/posts.controller.ts

@@ -4,6 +4,7 @@ import { DemoService } from './providers/demo/demo.service'
 import { DemoFilter } from '../../core/filters/demo.filter'
 import { DemoAuthGuard } from '../../core/guards/demo-auth.guard'
 import { Roles } from '../../core/decorators/roles.decorator'
+import { User } from '../../core/decorators/user.decorator'
 import { LoggingInterceptor } from '../../core/interceptors/logging.interceptor'
 import { TransformInterceptor } from '../../core/interceptors/transform.interceptor'
 import { ErrorsInterceptor } from '../../core/interceptors/errors.interceptor'
@@ -39,7 +40,10 @@ export class PostsController {
     // @SetMetadata('roles', ['member', 89])
     // @Roles('member', 'tester')
     @Roles(...['member', 'tester'])
-    store(@Body() post: CreatePostDto) {
+    store(@Body() post: CreatePostDto, @User('roles') roles) {
+        console.log('roles:', roles)
+        
+        
         // throw new HttpException('没有权限！', HttpStatus.FORBIDDEN)
         // throw new ForbiddenException('没有权限！')
         this.demoService.create(post);