【修改】 修改查询重置 垂直越权问题 我的消息
This commit is contained in:
+1
-2
@@ -4,7 +4,6 @@ import com.baomidou.mybatisplus.core.conditions.query.QueryWrapper;
|
||||
import com.baomidou.mybatisplus.core.metadata.IPage;
|
||||
import com.baomidou.mybatisplus.extension.plugins.pagination.Page;
|
||||
import com.jero.common.api.vo.Results;
|
||||
import com.jero.common.aspect.annotation.PermissionData;
|
||||
import com.jero.common.system.base.controller.JeroController;
|
||||
import com.jero.common.system.query.QueryGenerator;
|
||||
import com.jero.modules.message.entity.SysMessage;
|
||||
@@ -45,7 +44,7 @@ public class SysMessageController extends JeroController<SysMessage, ISysMessage
|
||||
* @return
|
||||
*/
|
||||
@GetMapping(value = "/page")
|
||||
@PermissionData("modules/message/sysMessageList")
|
||||
@RequiresPermissions("message:list")
|
||||
public Results<IPage<SysMessage>> queryPageList(SysMessage sysMessage, @RequestParam(name = "pageNo", defaultValue = "1") Integer pageNo,
|
||||
@RequestParam(name = "pageSize", defaultValue = "10") Integer pageSize, HttpServletRequest req) {
|
||||
QueryWrapper<SysMessage> queryWrapper = QueryGenerator.initQueryWrapper(sysMessage, req.getParameterMap());
|
||||
|
||||
+1
-2
@@ -5,7 +5,6 @@ import com.baomidou.mybatisplus.core.conditions.query.QueryWrapper;
|
||||
import com.baomidou.mybatisplus.core.metadata.IPage;
|
||||
import com.baomidou.mybatisplus.extension.plugins.pagination.Page;
|
||||
import com.jero.common.api.vo.Results;
|
||||
import com.jero.common.aspect.annotation.PermissionData;
|
||||
import com.jero.common.system.base.controller.JeroController;
|
||||
import com.jero.common.system.query.QueryGenerator;
|
||||
import com.jero.modules.message.entity.MsgParams;
|
||||
@@ -50,7 +49,7 @@ public class SysMessageTemplateController extends JeroController<SysMessageTempl
|
||||
* @return
|
||||
*/
|
||||
@GetMapping(value = "/page")
|
||||
@PermissionData("modules/message/sysMessageTemplateList")
|
||||
@RequiresPermissions("message:template:list")
|
||||
public Results<IPage<SysMessageTemplate>> queryPageList(SysMessageTemplate sysMessageTemplate, @RequestParam(name = "pageNo", defaultValue = "1") Integer pageNo,
|
||||
@RequestParam(name = "pageSize", defaultValue = "10") Integer pageSize, HttpServletRequest req) {
|
||||
QueryWrapper<SysMessageTemplate> queryWrapper = QueryGenerator.initQueryWrapper(sysMessageTemplate, req.getParameterMap());
|
||||
|
||||
+1
-2
@@ -7,7 +7,6 @@ import com.baomidou.mybatisplus.core.metadata.IPage;
|
||||
import com.baomidou.mybatisplus.extension.plugins.pagination.Page;
|
||||
import com.jero.common.api.vo.Results;
|
||||
import com.jero.common.aspect.annotation.AutoLog;
|
||||
import com.jero.common.aspect.annotation.PermissionData;
|
||||
import com.jero.common.constant.CommonConstant;
|
||||
import com.jero.common.constant.CommonSendStatus;
|
||||
import com.jero.common.constant.WebsocketConst;
|
||||
@@ -78,7 +77,7 @@ public class SysAnnouncementController {
|
||||
*/
|
||||
@GetMapping("/page")
|
||||
@AutoLog(operateType = 1,value = "查询系统通告")
|
||||
@PermissionData("isystem/annountCement")
|
||||
@RequiresPermissions("system:list")
|
||||
public Results<IPage<SysAnnouncement>> queryPageList(SysAnnouncement sysAnnouncement,
|
||||
@RequestParam(name="pageNo", defaultValue="1") Integer pageNo,
|
||||
@RequestParam(name="pageSize", defaultValue="10") Integer pageSize,
|
||||
|
||||
+2
-2
@@ -6,7 +6,6 @@ import com.baomidou.mybatisplus.core.conditions.update.LambdaUpdateWrapper;
|
||||
import com.baomidou.mybatisplus.core.metadata.IPage;
|
||||
import com.baomidou.mybatisplus.extension.plugins.pagination.Page;
|
||||
import com.jero.common.api.vo.Results;
|
||||
import com.jero.common.aspect.annotation.PermissionData;
|
||||
import com.jero.common.constant.CommonConstant;
|
||||
import com.jero.common.system.vo.LoginUser;
|
||||
import com.jero.common.util.oConvertUtils;
|
||||
@@ -16,6 +15,7 @@ import com.jero.modules.system.service.ISysAnnouncementSendService;
|
||||
import lombok.extern.slf4j.Slf4j;
|
||||
import org.apache.commons.lang.StringUtils;
|
||||
import org.apache.shiro.SecurityUtils;
|
||||
import org.apache.shiro.authz.annotation.RequiresPermissions;
|
||||
import org.springframework.beans.factory.annotation.Autowired;
|
||||
import org.springframework.web.bind.annotation.*;
|
||||
|
||||
@@ -187,8 +187,8 @@ public class SysAnnouncementSendController {
|
||||
* @功能:获取我的消息
|
||||
* @return
|
||||
*/
|
||||
@PermissionData(pageComponent = "isps/userAnnouncement")
|
||||
@GetMapping(value = "/getMyAnnouncementSend")
|
||||
@RequiresPermissions("my:mesg:list")
|
||||
public Results<IPage<AnnouncementSendModel>> getMyAnnouncementSend(AnnouncementSendModel announcementSendModel,
|
||||
@RequestParam(name="pageNo", defaultValue="1") Integer pageNo,
|
||||
@RequestParam(name="pageSize", defaultValue="10") Integer pageSize) {
|
||||
|
||||
-1
@@ -275,7 +275,6 @@ public class SysUserController {
|
||||
@RequiresPermissions("sys:user:sel")
|
||||
@AutoLog(operateType = 4,value = "用户删除")
|
||||
public Results<String> delete(@RequestBody Map<String,String> map) {
|
||||
long startTime = System.currentTimeMillis();
|
||||
String id = map.get("id");
|
||||
if(StringUtils.isBlank(id)){
|
||||
return Results.error("参数不识别!");
|
||||
|
||||
Reference in New Issue
Block a user