【修改】 修改查询重置 垂直越权问题 我的消息

This commit is contained in:
bupengxiang
2023-08-04 17:13:14 +08:00
parent 8662bb5bdf
commit 02d1eb34e3
8 changed files with 17 additions and 21 deletions
@@ -4,7 +4,6 @@ import com.baomidou.mybatisplus.core.conditions.query.QueryWrapper;
import com.baomidou.mybatisplus.core.metadata.IPage;
import com.baomidou.mybatisplus.extension.plugins.pagination.Page;
import com.jero.common.api.vo.Results;
import com.jero.common.aspect.annotation.PermissionData;
import com.jero.common.system.base.controller.JeroController;
import com.jero.common.system.query.QueryGenerator;
import com.jero.modules.message.entity.SysMessage;
@@ -45,7 +44,7 @@ public class SysMessageController extends JeroController<SysMessage, ISysMessage
* @return
*/
@GetMapping(value = "/page")
@PermissionData("modules/message/sysMessageList")
@RequiresPermissions("message:list")
public Results<IPage<SysMessage>> queryPageList(SysMessage sysMessage, @RequestParam(name = "pageNo", defaultValue = "1") Integer pageNo,
@RequestParam(name = "pageSize", defaultValue = "10") Integer pageSize, HttpServletRequest req) {
QueryWrapper<SysMessage> queryWrapper = QueryGenerator.initQueryWrapper(sysMessage, req.getParameterMap());
@@ -5,7 +5,6 @@ import com.baomidou.mybatisplus.core.conditions.query.QueryWrapper;
import com.baomidou.mybatisplus.core.metadata.IPage;
import com.baomidou.mybatisplus.extension.plugins.pagination.Page;
import com.jero.common.api.vo.Results;
import com.jero.common.aspect.annotation.PermissionData;
import com.jero.common.system.base.controller.JeroController;
import com.jero.common.system.query.QueryGenerator;
import com.jero.modules.message.entity.MsgParams;
@@ -50,7 +49,7 @@ public class SysMessageTemplateController extends JeroController<SysMessageTempl
* @return
*/
@GetMapping(value = "/page")
@PermissionData("modules/message/sysMessageTemplateList")
@RequiresPermissions("message:template:list")
public Results<IPage<SysMessageTemplate>> queryPageList(SysMessageTemplate sysMessageTemplate, @RequestParam(name = "pageNo", defaultValue = "1") Integer pageNo,
@RequestParam(name = "pageSize", defaultValue = "10") Integer pageSize, HttpServletRequest req) {
QueryWrapper<SysMessageTemplate> queryWrapper = QueryGenerator.initQueryWrapper(sysMessageTemplate, req.getParameterMap());
@@ -7,7 +7,6 @@ import com.baomidou.mybatisplus.core.metadata.IPage;
import com.baomidou.mybatisplus.extension.plugins.pagination.Page;
import com.jero.common.api.vo.Results;
import com.jero.common.aspect.annotation.AutoLog;
import com.jero.common.aspect.annotation.PermissionData;
import com.jero.common.constant.CommonConstant;
import com.jero.common.constant.CommonSendStatus;
import com.jero.common.constant.WebsocketConst;
@@ -78,7 +77,7 @@ public class SysAnnouncementController {
*/
@GetMapping("/page")
@AutoLog(operateType = 1,value = "查询系统通告")
@PermissionData("isystem/annountCement")
@RequiresPermissions("system:list")
public Results<IPage<SysAnnouncement>> queryPageList(SysAnnouncement sysAnnouncement,
@RequestParam(name="pageNo", defaultValue="1") Integer pageNo,
@RequestParam(name="pageSize", defaultValue="10") Integer pageSize,
@@ -6,7 +6,6 @@ import com.baomidou.mybatisplus.core.conditions.update.LambdaUpdateWrapper;
import com.baomidou.mybatisplus.core.metadata.IPage;
import com.baomidou.mybatisplus.extension.plugins.pagination.Page;
import com.jero.common.api.vo.Results;
import com.jero.common.aspect.annotation.PermissionData;
import com.jero.common.constant.CommonConstant;
import com.jero.common.system.vo.LoginUser;
import com.jero.common.util.oConvertUtils;
@@ -16,6 +15,7 @@ import com.jero.modules.system.service.ISysAnnouncementSendService;
import lombok.extern.slf4j.Slf4j;
import org.apache.commons.lang.StringUtils;
import org.apache.shiro.SecurityUtils;
import org.apache.shiro.authz.annotation.RequiresPermissions;
import org.springframework.beans.factory.annotation.Autowired;
import org.springframework.web.bind.annotation.*;
@@ -187,8 +187,8 @@ public class SysAnnouncementSendController {
* @功能:获取我的消息
* @return
*/
@PermissionData(pageComponent = "isps/userAnnouncement")
@GetMapping(value = "/getMyAnnouncementSend")
@RequiresPermissions("my:mesg:list")
public Results<IPage<AnnouncementSendModel>> getMyAnnouncementSend(AnnouncementSendModel announcementSendModel,
@RequestParam(name="pageNo", defaultValue="1") Integer pageNo,
@RequestParam(name="pageSize", defaultValue="10") Integer pageSize) {
@@ -275,7 +275,6 @@ public class SysUserController {
@RequiresPermissions("sys:user:sel")
@AutoLog(operateType = 4,value = "用户删除")
public Results<String> delete(@RequestBody Map<String,String> map) {
long startTime = System.currentTimeMillis();
String id = map.get("id");
if(StringUtils.isBlank(id)){
return Results.error("参数不识别!");