【fix bug】去掉无效的权限拦截

This commit is contained in:
zer0Black
2023-05-30 14:07:45 +08:00
parent 492261a391
commit 964cb1a6a4
2 changed files with 13 additions and 44 deletions
@@ -115,7 +115,6 @@ public class SysUserController {
* @param req * @param req
* @return * @return
*/ */
@RequiresPermissions("sys:user:list")
@PermissionData(pageComponent = "system/UserList") @PermissionData(pageComponent = "system/UserList")
@GetMapping("/page") @GetMapping("/page")
public Results<IPage<SysUser>> queryPageList(SysUser user, public Results<IPage<SysUser>> queryPageList(SysUser user,
@@ -173,7 +172,7 @@ public class SysUserController {
String rsaPrivateKey = String.valueOf(redisUtil.get(rsaPublicKey)); String rsaPrivateKey = String.valueOf(redisUtil.get(rsaPublicKey));
SysUser user = JSON.parseObject(jsonObject.toJSONString(), SysUser.class); SysUser user = JSON.parseObject(jsonObject.toJSONString(), SysUser.class);
setUser(rsaPrivateKey, user); this.setUserInfo(rsaPrivateKey, user);
// 保存用户走一个service 保证事务 // 保存用户走一个service 保证事务
sysUserService.saveUser(user, selectedRoles, selectedDeparts); sysUserService.saveUser(user, selectedRoles, selectedDeparts);
@@ -184,7 +183,12 @@ public class SysUserController {
} }
} }
private void setUser(String rsaPrivateKey, SysUser user) { /**
* 给用户信息处理数据,赋基础值
* @param rsaPrivateKey
* @param user
*/
private void setUserInfo(String rsaPrivateKey, SysUser user) {
try { try {
if (StrUtil.isNotEmpty(user.getEmail())){ if (StrUtil.isNotEmpty(user.getEmail())){
String email = CommonUtils.decryptBtRsaPriKey(user.getEmail(), rsaPrivateKey); String email = CommonUtils.decryptBtRsaPriKey(user.getEmail(), rsaPrivateKey);
@@ -251,7 +255,7 @@ public class SysUserController {
} catch (Exception e) { } catch (Exception e) {
throw new JeroBootException("解密失败!", e); throw new JeroBootException("解密失败!", e);
} }
// 3:把数据加密在放回来 // 3:把数据加密在放回来
user.setEmail(email); user.setEmail(email);
user.setPhone(phone); user.setPhone(phone);
user.setUpdateTime(new Date()); user.setUpdateTime(new Date());
@@ -304,8 +308,7 @@ public class SysUserController {
return Results.OK(OPTION_SUCCESS); return Results.OK(OPTION_SUCCESS);
} }
@RequiresPermissions("sys:user:list")
// @RequestMapping(value = "/queryById", method = RequestMethod.GET)
@GetMapping("/queryById") @GetMapping("/queryById")
public Results<SysUser> queryById(@RequestParam(name = "id", required = true) String id) { public Results<SysUser> queryById(@RequestParam(name = "id", required = true) String id) {
SysUser sysUser = sysUserService.queryById(id); SysUser sysUser = sysUserService.queryById(id);
@@ -316,8 +319,6 @@ public class SysUserController {
} }
} }
@RequiresPermissions("sys:user:list")
// @RequestMapping(value = "/queryUserRole", method = RequestMethod.GET)
@GetMapping("/queryUserRole") @GetMapping("/queryUserRole")
public Results<List<String>> queryUserRole(@RequestParam(name = "userid", required = true) String userid) { public Results<List<String>> queryUserRole(@RequestParam(name = "userid", required = true) String userid) {
List<String> list = new ArrayList<>(); List<String> list = new ArrayList<>();
@@ -340,8 +341,6 @@ public class SysUserController {
* @param sysUser * @param sysUser
* @return * @return
*/ */
@RequiresPermissions("sys:user:list")
// @RequestMapping(value = "/checkOnlyUser", method = RequestMethod.GET)
@GetMapping("/checkOnlyUser") @GetMapping("/checkOnlyUser")
public Results<Boolean> checkOnlyUser(SysUser sysUser) { public Results<Boolean> checkOnlyUser(SysUser sysUser) {
Results<Boolean> result = new Results<>(); Results<Boolean> result = new Results<>();
@@ -371,7 +370,6 @@ public class SysUserController {
*/ */
// @RequestMapping(value = "/changePassword", method = RequestMethod.PUT) // @RequestMapping(value = "/changePassword", method = RequestMethod.PUT)
@PostMapping("/changePassword") @PostMapping("/changePassword")
@RequiresPermissions("user:edit")
public Results<T> changePassword(@RequestBody SysUser sysUser) { public Results<T> changePassword(@RequestBody SysUser sysUser) {
SysUser u = this.sysUserService.getOne(new LambdaQueryWrapper<SysUser>().eq(SysUser::getUsername, sysUser.getUsername())); SysUser u = this.sysUserService.getOne(new LambdaQueryWrapper<SysUser>().eq(SysUser::getUsername, sysUser.getUsername()));
if (u == null) { if (u == null) {
@@ -387,7 +385,6 @@ public class SysUserController {
* @param userId * @param userId
* @return * @return
*/ */
@RequiresPermissions("sys:user:list")
// @RequestMapping(value = "/userDepartList", method = RequestMethod.GET) // @RequestMapping(value = "/userDepartList", method = RequestMethod.GET)
@GetMapping("/userDepartList") @GetMapping("/userDepartList")
public Results<List<DepartIdModel>> getUserDepartsList(@RequestParam(name = "userId", required = true) String userId) { public Results<List<DepartIdModel>> getUserDepartsList(@RequestParam(name = "userId", required = true) String userId) {
@@ -417,7 +414,6 @@ public class SysUserController {
* *
* @return * @return
*/ */
@RequiresPermissions("sys:user:list")
// @RequestMapping(value = "/generateUserId", method = RequestMethod.GET) // @RequestMapping(value = "/generateUserId", method = RequestMethod.GET)
@GetMapping("/generateUserId") @GetMapping("/generateUserId")
public Results<String> generateUserId() { public Results<String> generateUserId() {
@@ -435,7 +431,6 @@ public class SysUserController {
* @param id * @param id
* @return * @return
*/ */
@RequiresPermissions("sys:user:list")
// @RequestMapping(value = "/queryUserByDepId", method = RequestMethod.GET) // @RequestMapping(value = "/queryUserByDepId", method = RequestMethod.GET)
@GetMapping("/queryUserByDepId") @GetMapping("/queryUserByDepId")
public Results<List<SysUser>> queryUserByDepId(@RequestParam(name = "id", required = true) String id, @RequestParam(name="realname",required=false) String realname , @RequestParam(name="username",required=false) String username) { public Results<List<SysUser>> queryUserByDepId(@RequestParam(name = "id", required = true) String id, @RequestParam(name="realname",required=false) String realname , @RequestParam(name="username",required=false) String username) {
@@ -484,7 +479,6 @@ public class SysUserController {
*/ */
// @RequestMapping(value = "/queryUserComponentData", method = RequestMethod.GET) // @RequestMapping(value = "/queryUserComponentData", method = RequestMethod.GET)
@GetMapping("/queryUserComponentData") @GetMapping("/queryUserComponentData")
@RequiresPermissions("sys:user:list")
public Results<IPage<SysUser>> queryUserComponentData( public Results<IPage<SysUser>> queryUserComponentData(
@RequestParam(name="pageNo", defaultValue="1") Integer pageNo, @RequestParam(name="pageNo", defaultValue="1") Integer pageNo,
@RequestParam(name="pageSize", defaultValue="10") Integer pageSize, @RequestParam(name="pageSize", defaultValue="10") Integer pageSize,
@@ -669,7 +663,6 @@ public class SysUserController {
*/ */
//@RequiresPermissions("sys:user:list") //@RequiresPermissions("sys:user:list")
@GetMapping("/queryByIds") @GetMapping("/queryByIds")
@RequiresPermissions("sys:user:list")
public Results<Collection<SysUser>> queryByIds(@RequestParam String userIds) { public Results<Collection<SysUser>> queryByIds(@RequestParam String userIds) {
Results<Collection<SysUser>> result = new Results<>(); Results<Collection<SysUser>> result = new Results<>();
String[] userId = userIds.split(","); String[] userId = userIds.split(",");
@@ -716,8 +709,7 @@ public class SysUserController {
} }
return sysUserService.resetPassword(username,oldpassword,password,confirmpassword); return sysUserService.resetPassword(username,oldpassword,password,confirmpassword);
} }
@RequiresPermissions("sys:user:list")
// @RequestMapping(value = "/userRoleList", method = RequestMethod.GET)
@GetMapping("/userRoleList") @GetMapping("/userRoleList")
public Results<IPage<SysUser>> userRoleList(@RequestParam(name="pageNo", defaultValue="1") Integer pageNo, public Results<IPage<SysUser>> userRoleList(@RequestParam(name="pageNo", defaultValue="1") Integer pageNo,
@RequestParam(name="pageSize", defaultValue="10") Integer pageSize, HttpServletRequest req) { @RequestParam(name="pageSize", defaultValue="10") Integer pageSize, HttpServletRequest req) {
@@ -741,7 +733,6 @@ public class SysUserController {
* @return * @return
*/ */
@RequiresPermissions("user:add") @RequiresPermissions("user:add")
// @RequestMapping(value = "/addSysUserRole", method = RequestMethod.POST)
@PostMapping("/addSysUserRole") @PostMapping("/addSysUserRole")
public Results<String> addSysUserRole(@RequestBody SysUserRoleVO sysUserRoleVO) { public Results<String> addSysUserRole(@RequestBody SysUserRoleVO sysUserRoleVO) {
Results<String> result = new Results<>(); Results<String> result = new Results<>();
@@ -772,7 +763,6 @@ public class SysUserController {
* @param * @param
* @return * @return
*/ */
// @RequestMapping(value = "/deleteUserRole", method = RequestMethod.DELETE)
@PostMapping("/deleteUserRole") @PostMapping("/deleteUserRole")
@RequiresPermissions("sys:user:sel") @RequiresPermissions("sys:user:sel")
public Results<Object> deleteUserRole(@RequestParam(name="roleId") String roleId, public Results<Object> deleteUserRole(@RequestParam(name="roleId") String roleId,
@@ -794,7 +784,6 @@ public class SysUserController {
* @param * @param
* @return * @return
*/ */
// @RequestMapping(value = "/deleteUserRoleBatch", method = RequestMethod.DELETE)
@PostMapping("/deleteUserRoleBatch") @PostMapping("/deleteUserRoleBatch")
@RequiresPermissions("sys:user:sel") @RequiresPermissions("sys:user:sel")
public Results<SysUserRole> deleteUserRoleBatch( public Results<SysUserRole> deleteUserRoleBatch(
@@ -814,9 +803,7 @@ public class SysUserController {
/** /**
* 部门用户列表 * 部门用户列表
*/ */
// @RequestMapping(value = "/departUserList", method = RequestMethod.GET)
@GetMapping("/departUserList") @GetMapping("/departUserList")
@RequiresPermissions("sys:user:list")
public Results<IPage<SysUser>> departUserList(@RequestParam(name="pageNo", defaultValue="1") Integer pageNo, public Results<IPage<SysUser>> departUserList(@RequestParam(name="pageNo", defaultValue="1") Integer pageNo,
@RequestParam(name="pageSize", defaultValue="10") Integer pageSize, HttpServletRequest req) { @RequestParam(name="pageSize", defaultValue="10") Integer pageSize, HttpServletRequest req) {
Results<IPage<SysUser>> result = new Results<>(); Results<IPage<SysUser>> result = new Results<>();
@@ -866,7 +853,6 @@ public class SysUserController {
* 若某个用户包含多个部门,则会显示多条记录,可自行处理成单条记录 * 若某个用户包含多个部门,则会显示多条记录,可自行处理成单条记录
*/ */
@GetMapping("/queryByOrgCode") @GetMapping("/queryByOrgCode")
@RequiresPermissions("sys:user:list")
public Results<IPage<SysUserSysDepartModel>> queryByDepartId( public Results<IPage<SysUserSysDepartModel>> queryByDepartId(
@RequestParam(name = "pageNo", defaultValue = "1") Integer pageNo, @RequestParam(name = "pageNo", defaultValue = "1") Integer pageNo,
@RequestParam(name = "pageSize", defaultValue = "10") Integer pageSize, @RequestParam(name = "pageSize", defaultValue = "10") Integer pageSize,
@@ -881,7 +867,6 @@ public class SysUserController {
* 给指定部门添加对应的用户 * 给指定部门添加对应的用户
*/ */
@RequiresPermissions("user:add") @RequiresPermissions("user:add")
// @RequestMapping(value = "/editSysDepartWithUser", method = RequestMethod.POST)
@PostMapping("/editSysDepartWithUser") @PostMapping("/editSysDepartWithUser")
public Results<String> editSysDepartWithUser(@RequestBody SysDepartUsersVO sysDepartUsersVO) { public Results<String> editSysDepartWithUser(@RequestBody SysDepartUsersVO sysDepartUsersVO) {
Results<String> result = new Results<>(); Results<String> result = new Results<>();
@@ -910,7 +895,6 @@ public class SysUserController {
/** /**
* 删除指定机构的用户关系 * 删除指定机构的用户关系
*/ */
// @RequestMapping(value = "/deleteUserInDepart", method = RequestMethod.DELETE)
@PostMapping("/deleteUserInDepart") @PostMapping("/deleteUserInDepart")
@RequiresPermissions("sys:user:sel") @RequiresPermissions("sys:user:sel")
public Results<Object> deleteUserInDepart(@RequestParam(name="depId") String depId, public Results<Object> deleteUserInDepart(@RequestParam(name="depId") String depId,
@@ -930,7 +914,6 @@ public class SysUserController {
/** /**
* 批量删除指定机构的用户关系 * 批量删除指定机构的用户关系
*/ */
// @RequestMapping(value = "/deleteUserInDepartBatch", method = RequestMethod.DELETE)
@PostMapping("/deleteUserInDepartBatch") @PostMapping("/deleteUserInDepartBatch")
@Transactional @Transactional
@RequiresPermissions("sys:user:sel") @RequiresPermissions("sys:user:sel")
@@ -957,8 +940,6 @@ public class SysUserController {
* 查询当前用户的所有部门/当前部门编码 * 查询当前用户的所有部门/当前部门编码
* @return * @return
*/ */
@RequiresPermissions("sys:user:list")
// @RequestMapping(value = "/getCurrentUserDeparts", method = RequestMethod.GET)
@GetMapping("/getCurrentUserDeparts") @GetMapping("/getCurrentUserDeparts")
public Results<Map<String,Object>> getCurrentUserDeparts() { public Results<Map<String,Object>> getCurrentUserDeparts() {
try { try {
@@ -975,8 +956,6 @@ public class SysUserController {
} }
/** /**
* 用户注册接口 * 用户注册接口
* *
@@ -1132,7 +1111,6 @@ public class SysUserController {
* *
* @return * @return
*/ */
//@RequiresPermissions("sys:user:list")
@GetMapping("/getUserSectionInfoByToken") @GetMapping("/getUserSectionInfoByToken")
public Results<Map<String, Object>> getUserSectionInfoByToken(HttpServletRequest request, @RequestParam(name = "token", required = false) String token) { public Results<Map<String, Object>> getUserSectionInfoByToken(HttpServletRequest request, @RequestParam(name = "token", required = false) String token) {
try { try {
@@ -1170,7 +1148,6 @@ public class SysUserController {
* @param pageSize * @param pageSize
* @return * @return
*/ */
@RequiresPermissions("sys:user:list")
@GetMapping("/appUserList") @GetMapping("/appUserList")
public Results<IPage<SysUser>> appUserList(@RequestParam(name = "keyword", required = false) String keyword, public Results<IPage<SysUser>> appUserList(@RequestParam(name = "keyword", required = false) String keyword,
@RequestParam(name = USER_NAME, required = false) String username, @RequestParam(name = USER_NAME, required = false) String username,
@@ -1207,7 +1184,6 @@ public class SysUserController {
* *
* @return logicDeletedUserList * @return logicDeletedUserList
*/ */
@RequiresPermissions("sys:user:list")
@GetMapping("/recycleBin") @GetMapping("/recycleBin")
public Results<List<SysUser>> getRecycleBin() { public Results<List<SysUser>> getRecycleBin() {
List<SysUser> logicDeletedUserList = sysUserService.queryLogicDeleted(); List<SysUser> logicDeletedUserList = sysUserService.queryLogicDeleted();
@@ -1228,8 +1204,6 @@ public class SysUserController {
* @param jsonObject * @param jsonObject
* @return * @return
*/ */
//@RequiresPermissions("sys:user:list")
// @RequestMapping(value = "/putRecycleBin", method = RequestMethod.PUT)
@PostMapping("/putRecycleBin") @PostMapping("/putRecycleBin")
@RequiresPermissions("user:edit") @RequiresPermissions("user:edit")
public Results<T> putRecycleBin(@RequestBody JSONObject jsonObject, HttpServletRequest request) { public Results<T> putRecycleBin(@RequestBody JSONObject jsonObject, HttpServletRequest request) {
@@ -1249,7 +1223,6 @@ public class SysUserController {
* @param userIds 被删除的用户ID,多个id用半角逗号分割 * @param userIds 被删除的用户ID,多个id用半角逗号分割
* @return * @return
*/ */
// @RequestMapping(value = "/deleteRecycleBin", method = RequestMethod.DELETE)
@PostMapping("/deleteRecycleBin") @PostMapping("/deleteRecycleBin")
@RequiresPermissions("sys:user:sel") @RequiresPermissions("sys:user:sel")
public Results<T> deleteRecycleBin(@RequestParam("userIds") String userIds) { public Results<T> deleteRecycleBin(@RequestParam("userIds") String userIds) {
@@ -1266,7 +1239,6 @@ public class SysUserController {
* @return * @return
*/ */
@RequiresPermissions("user:edit") @RequiresPermissions("user:edit")
// @RequestMapping(value = "/appEdit", method = RequestMethod.PUT)
@PostMapping("/appEdit") @PostMapping("/appEdit")
public Results<SysUser> appEdit(HttpServletRequest request, @RequestBody JSONObject jsonObject) { public Results<SysUser> appEdit(HttpServletRequest request, @RequestBody JSONObject jsonObject) {
Results<SysUser> result = new Results<>(); Results<SysUser> result = new Results<>();
@@ -1290,7 +1262,7 @@ public class SysUserController {
return Results.error("手机号已存在!"); return Results.error("手机号已存在!");
} }
} }
setUser(sysUser, realname, avatar, sex, phone, email, birthday); setUserInfo(sysUser, realname, avatar, sex, phone, email, birthday);
sysUserService.updateById(sysUser); sysUserService.updateById(sysUser);
} }
} catch (Exception e) { } catch (Exception e) {
@@ -1300,7 +1272,7 @@ public class SysUserController {
return result; return result;
} }
private void setUser(SysUser sysUser, String realname, String avatar, String sex, String phone, String email, Date birthday) { private void setUserInfo(SysUser sysUser, String realname, String avatar, String sex, String phone, String email, Date birthday) {
if(StringUtils.isNotBlank(realname)){ if(StringUtils.isNotBlank(realname)){
sysUser.setRealname(realname); sysUser.setRealname(realname);
} }
@@ -1327,7 +1299,6 @@ public class SysUserController {
* @param clientId * @param clientId
* @return * @return
*/ */
// @RequestMapping(value = "/saveClientId", method = RequestMethod.GET)
@PostMapping("/saveClientId") @PostMapping("/saveClientId")
public Results<SysUser> saveClientId(HttpServletRequest request, @RequestParam("clientId")String clientId) { public Results<SysUser> saveClientId(HttpServletRequest request, @RequestParam("clientId")String clientId) {
Results<SysUser> result = new Results<>(); Results<SysUser> result = new Results<>();
@@ -1352,7 +1323,6 @@ public class SysUserController {
* *
* @return Result * @return Result
*/ */
//@RequiresPermissions("sys:user:list")
@GetMapping("/queryChildrenByUsername") @GetMapping("/queryChildrenByUsername")
public Results<Map<String, Object>> queryChildrenByUsername(@RequestParam("userId") String userId) { public Results<Map<String, Object>> queryChildrenByUsername(@RequestParam("userId") String userId) {
//获取用户信息 //获取用户信息
@@ -1419,7 +1389,6 @@ public class SysUserController {
* @param json * @param json
* @return * @return
*/ */
// @RequestMapping(value = "/updateMobile", method = RequestMethod.PUT)
@PostMapping("/updateMobile") @PostMapping("/updateMobile")
public Results<SysUser> changMobile(@RequestBody JSONObject json, HttpServletRequest request) { public Results<SysUser> changMobile(@RequestBody JSONObject json, HttpServletRequest request) {
String smscode = json.getString(SMSCODE); String smscode = json.getString(SMSCODE);
+1 -1
View File
@@ -31,7 +31,7 @@
<a-col :md="6" :sm="8"> <a-col :md="6" :sm="8">
<a-form-item label="手机号码"> <a-form-item label="手机号码">
<a-input placeholder="请输入手机号查询" v-model="queryParam.phone"></a-input> <a-input placeholder="请输入完整手机号精准查询" v-model="queryParam.phone"></a-input>
</a-form-item> </a-form-item>
</a-col> </a-col>