From 81060cc84fdac80ab00bb72b0059aba03ffe9ddd Mon Sep 17 00:00:00 2001 From: liao Date: Sat, 6 May 2023 10:42:58 +0800 Subject: [PATCH] =?UTF-8?q?fix=2068490=20=E3=80=90=E5=9E=82=E7=9B=B4?= =?UTF-8?q?=E8=B6=8A=E6=9D=83=E3=80=91=E7=B3=BB=E7=BB=9F=E7=AE=A1=E7=90=86?= =?UTF-8?q?-=E8=8F=9C=E5=8D=95=E7=AE=A1=E7=90=86=20=E6=8E=A5=E5=8F=A3?= =?UTF-8?q?=E6=9C=AA=E5=A4=84=E7=90=86=E8=B6=8A=E6=9D=83?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- .../controller/SysPermissionController.java | 21 +++++++++++++++++++ 1 file changed, 21 insertions(+) diff --git a/jero-boot/jero-boot-module-system/src/main/java/com/jero/modules/system/controller/SysPermissionController.java b/jero-boot/jero-boot-module-system/src/main/java/com/jero/modules/system/controller/SysPermissionController.java index 8d21d1ba..065b9d69 100644 --- a/jero-boot/jero-boot-module-system/src/main/java/com/jero/modules/system/controller/SysPermissionController.java +++ b/jero-boot/jero-boot-module-system/src/main/java/com/jero/modules/system/controller/SysPermissionController.java @@ -24,6 +24,7 @@ import lombok.extern.slf4j.Slf4j; import org.apache.commons.lang.StringUtils; import org.apache.poi.ss.formula.functions.T; import org.apache.shiro.SecurityUtils; +import org.apache.shiro.authz.annotation.RequiresPermissions; import org.jetbrains.annotations.NotNull; import org.springframework.beans.factory.annotation.Autowired; import org.springframework.web.bind.annotation.*; @@ -68,6 +69,7 @@ public class SysPermissionController { * @return */ @GetMapping("/page") + @RequiresPermissions("PermissionList:list") public Results> list() { long start = System.currentTimeMillis(); Results> result = new Results<>(); @@ -94,6 +96,7 @@ public class SysPermissionController { * @return */ @GetMapping("/getSystemMenuList") + @RequiresPermissions("PermissionList:list") public Results> getSystemMenuList() { long start = System.currentTimeMillis(); Results> result = new Results<>(); @@ -123,6 +126,7 @@ public class SysPermissionController { * @return */ @GetMapping("/getSystemSubmenu") + @RequiresPermissions("PermissionList:list") public Results> getSystemSubmenu(@RequestParam("parentId") String parentId){ Results> result = new Results<>(); try{ @@ -153,6 +157,7 @@ public class SysPermissionController { * @return 返回 key-value 的 Map */ @GetMapping("/getSystemSubmenuBatch") + @RequiresPermissions("PermissionList:list") public Results>> getSystemSubmenuBatch(@RequestParam("parentIds") String parentIds) { try { LambdaQueryWrapper query = new LambdaQueryWrapper<>(); @@ -186,6 +191,7 @@ public class SysPermissionController { * @return */ @GetMapping("/getUserPermissionByToken") + @RequiresPermissions("PermissionList:list") public Results getUserPermissionByToken() { Results result = new Results<>(); try { @@ -230,6 +236,7 @@ public class SysPermissionController { */ //@RequiresRoles({ "admin" }) @PostMapping("/add") + @RequiresPermissions("PermissionList:add") public Results add(@RequestBody SysPermission permission) { try { permission = PermissionDataUtil.intelligentProcessData(permission); @@ -248,6 +255,7 @@ public class SysPermissionController { */ //@RequiresRoles({ "admin" }) @PostMapping("/edit") + @RequiresPermissions("PermissionList:edit") public Results edit(@RequestBody SysPermission permission) { try { permission = PermissionDataUtil.intelligentProcessData(permission); @@ -266,6 +274,7 @@ public class SysPermissionController { */ //@RequiresRoles({ "admin" }) @PostMapping("/delete") + @RequiresPermissions("PermissionList:delete") public Results delete(@RequestBody Map map) { String id = map.get("id"); if(StringUtils.isBlank(id)){ @@ -287,6 +296,7 @@ public class SysPermissionController { */ //@RequiresRoles({ "admin" }) @PostMapping("/deleteBatch") + @RequiresPermissions("PermissionList:delete") public Results deleteBatch(@RequestBody Map map) { String ids = map.get("ids"); if(StringUtils.isBlank(ids)){ @@ -312,6 +322,7 @@ public class SysPermissionController { * @return */ @GetMapping("/queryTreeList") + @RequiresPermissions("PermissionList:list") public Results> queryTreeList() { Results> result = new Results<>(); // 全部权限ids @@ -344,6 +355,7 @@ public class SysPermissionController { * @return */ @GetMapping("/queryListAsync") + @RequiresPermissions("PermissionList:list") public Results> queryAsync(@RequestParam(name = "pid", required = false) String parentId) { Results> result = new Results<>(); try { @@ -367,6 +379,7 @@ public class SysPermissionController { * @return */ @GetMapping("/queryRolePermission") + @RequiresPermissions("PermissionList:list") public Results> queryRolePermission(@RequestParam(name = "roleId", required = true) String roleId) { Results> result = new Results<>(); try { @@ -385,6 +398,7 @@ public class SysPermissionController { * @return */ @PostMapping("/saveRolePermission") + @RequiresPermissions("PermissionList:add") //@RequiresRoles({ "admin" }) public Results saveRolePermission(@RequestBody JSONObject json) { long start = System.currentTimeMillis(); @@ -655,6 +669,7 @@ public class SysPermissionController { * @return */ @GetMapping("/getPermRuleListByPermId") + @RequiresPermissions("PermissionList:list") public Results> getPermRuleListByPermId(SysPermissionDataRule sysPermissionDataRule) { List permRuleList = sysPermissionDataRuleService.getPermRuleListByPermId(sysPermissionDataRule.getPermissionId()); Results> result = new Results<>(); @@ -671,6 +686,7 @@ public class SysPermissionController { */ //@RequiresRoles({ "admin" }) @PostMapping("/addPermissionRule") + @RequiresPermissions("PermissionList:add") public Results addPermissionRule(@RequestBody SysPermissionDataRule sysPermissionDataRule) { try { sysPermissionDataRule.setCreateTime(new Date()); @@ -684,6 +700,7 @@ public class SysPermissionController { //@RequiresRoles({ "admin" }) @PostMapping("/editPermissionRule") + @RequiresPermissions("PermissionList:edit") public Results editPermissionRule(@RequestBody SysPermissionDataRule sysPermissionDataRule) { try { sysPermissionDataRuleService.saveOrUpdate(sysPermissionDataRule); @@ -702,6 +719,7 @@ public class SysPermissionController { */ //@RequiresRoles({ "admin" }) @PostMapping("/deletePermissionRule") + @RequiresPermissions("PermissionList:delete") public Results deletePermissionRule(@RequestBody Map map) { try { String id = map.get("id"); @@ -723,6 +741,7 @@ public class SysPermissionController { * @return */ @GetMapping("/queryPermissionRule") + @RequiresPermissions("PermissionList:list") public Results> queryPermissionRule(SysPermissionDataRule sysPermissionDataRule) { try { List permRuleList = sysPermissionDataRuleService.queryPermissionRule(sysPermissionDataRule); @@ -739,6 +758,7 @@ public class SysPermissionController { * @return */ @GetMapping("/queryDepartPermission") + @RequiresPermissions("PermissionList:list") public Results> queryDepartPermission(@RequestParam(name = "departId", required = true) String departId) { Results> result = new Results<>(); try { @@ -757,6 +777,7 @@ public class SysPermissionController { * @return */ @PostMapping("/saveDepartPermission") + @RequiresPermissions("PermissionList:add") //@RequiresRoles({ "admin" }) public Results saveDepartPermission(@RequestBody JSONObject json) { long start = System.currentTimeMillis();