【fix】去除用户列表的接口权限,规避查人、查角色接口无法获取数据的问题

This commit is contained in:
zer0Black
2022-12-22 13:50:27 +08:00
parent 85ac6d8293
commit 56ce3d9a1d
2 changed files with 26 additions and 26 deletions
@@ -90,7 +90,7 @@ public class SysRoleController {
* @param req
* @return
*/
@RequiresPermissions("sys:role:list")
//@RequiresPermissions("sys:role:list")
@RequestMapping(value = "/page", method = RequestMethod.GET)
public Result<IPage<SysRole>> queryPageList(SysRole role,
@RequestParam(name="pageNo", defaultValue="1") Integer pageNo,
@@ -182,7 +182,7 @@ public class SysRoleController {
* @param id
* @return
*/
@RequiresPermissions("sys:role:list")
//@RequiresPermissions("sys:role:list")
@RequestMapping(value = "/queryById", method = RequestMethod.GET)
public Result<SysRole> queryById(@RequestParam(name="id",required=true) String id) {
SysRole sysRole = sysRoleService.getById(id);
@@ -192,7 +192,7 @@ public class SysRoleController {
return Result.OK(sysRole);
}
}
@RequiresPermissions("sys:role:list")
//@RequiresPermissions("sys:role:list")
@RequestMapping(value = "/queryall", method = RequestMethod.GET)
public Result<List<SysRole>> queryall() {
List<SysRole> list = sysRoleService.list();
@@ -206,7 +206,7 @@ public class SysRoleController {
/**
* 校验角色编码唯一
*/
@RequiresPermissions("sys:role:list")
//@RequiresPermissions("sys:role:list")
@RequestMapping(value = "/checkRoleCode", method = RequestMethod.GET)
public Result<Boolean> checkUsername(String id,String roleCode) {
Result<Boolean> result = new Result<>();
@@ -299,7 +299,7 @@ public class SysRoleController {
/**
* 查询数据规则数据
*/
@RequiresPermissions("sys:role:list")
//@RequiresPermissions("sys:role:list")
@GetMapping(value = "/datarule/{permissionId}/{roleId}")
public Result<?> loadDatarule(@PathVariable("permissionId") String permissionId,@PathVariable("roleId") String roleId) {
List<SysPermissionDataRule> list = sysPermissionDataRuleService.getPermRuleListByPermId(permissionId);
@@ -329,7 +329,7 @@ public class SysRoleController {
/**
* 保存数据规则至角色菜单关联表
*/
@RequiresPermissions("sys:role:list")
//@RequiresPermissions("sys:role:list")
@PostMapping(value = "/datarule")
public Result<?> saveDatarule(@RequestBody JSONObject jsonObject) {
try {
@@ -360,7 +360,7 @@ public class SysRoleController {
* @param request
* @return
*/
@RequiresPermissions("sys:role:list")
//@RequiresPermissions("sys:role:list")
@RequestMapping(value = "/queryTreeList", method = RequestMethod.GET)
public Result<Map<String,Object>> queryTreeList(HttpServletRequest request) {
Result<Map<String,Object>> result = new Result<>();
@@ -386,7 +386,7 @@ public class SysRoleController {
}
return result;
}
@RequiresPermissions("sys:role:list")
//@RequiresPermissions("sys:role:list")
private void getTreeModelList(List<TreeModel> treeList,List<SysPermission> metaList,TreeModel temp) {
for (SysPermission permission : metaList) {
String tempPid = permission.getParentId();
@@ -95,7 +95,7 @@ public class SysUserController {
* @param req
* @return
*/
@RequiresPermissions("sys:user:list")
//@RequiresPermissions("sys:user:list")
@PermissionData(pageComponent = "system/UserList")
@RequestMapping(value = "/page", method = RequestMethod.GET)
public Result<IPage<SysUser>> queryPageList(SysUser user,
@@ -238,7 +238,7 @@ public class SysUserController {
}
@RequiresPermissions("sys:user:list")
//@RequiresPermissions("sys:user:list")
@RequestMapping(value = "/frozenBatch", method = RequestMethod.PUT)
public Result<Object> frozenBatch(@RequestBody JSONObject jsonObject) {
try {
@@ -258,7 +258,7 @@ public class SysUserController {
return Result.OK("操作成功!");
}
@RequiresPermissions("sys:user:list")
//@RequiresPermissions("sys:user:list")
@RequestMapping(value = "/queryById", method = RequestMethod.GET)
public Result<SysUser> queryById(@RequestParam(name = "id", required = true) String id) {
SysUser sysUser = sysUserService.getById(id);
@@ -269,7 +269,7 @@ public class SysUserController {
}
}
@RequiresPermissions("sys:user:list")
//@RequiresPermissions("sys:user:list")
@RequestMapping(value = "/queryUserRole", method = RequestMethod.GET)
public Result<List<String>> queryUserRole(@RequestParam(name = "userid", required = true) String userid) {
List<String> list = new ArrayList<String>();
@@ -292,7 +292,7 @@ public class SysUserController {
* @param sysUser
* @return
*/
@RequiresPermissions("sys:user:list")
//@RequiresPermissions("sys:user:list")
@RequestMapping(value = "/checkOnlyUser", method = RequestMethod.GET)
public Result<Boolean> checkOnlyUser(SysUser sysUser) {
Result<Boolean> result = new Result<>();
@@ -336,7 +336,7 @@ public class SysUserController {
* @param userId
* @return
*/
@RequiresPermissions("sys:user:list")
//@RequiresPermissions("sys:user:list")
@RequestMapping(value = "/userDepartList", method = RequestMethod.GET)
public Result<List<DepartIdModel>> getUserDepartsList(@RequestParam(name = "userId", required = true) String userId) {
Result<List<DepartIdModel>> result = new Result<>();
@@ -365,7 +365,7 @@ public class SysUserController {
*
* @return
*/
@RequiresPermissions("sys:user:list")
//@RequiresPermissions("sys:user:list")
@RequestMapping(value = "/generateUserId", method = RequestMethod.GET)
public Result<String> generateUserId() {
Result<String> result = new Result<>();
@@ -382,7 +382,7 @@ public class SysUserController {
* @param id
* @return
*/
@RequiresPermissions("sys:user:list")
//@RequiresPermissions("sys:user:list")
@RequestMapping(value = "/queryUserByDepId", method = RequestMethod.GET)
public Result<List<SysUser>> queryUserByDepId(@RequestParam(name = "id", required = true) String id,@RequestParam(name="realname",required=false) String realname) {
Result<List<SysUser>> result = new Result<>();
@@ -548,7 +548,7 @@ public class SysUserController {
* @param userIds
* @return
*/
@RequiresPermissions("sys:user:list")
//@RequiresPermissions("sys:user:list")
@RequestMapping(value = "/queryByIds", method = RequestMethod.GET)
public Result<Collection<SysUser>> queryByIds(@RequestParam String userIds) {
Result<Collection<SysUser>> result = new Result<>();
@@ -592,7 +592,7 @@ public class SysUserController {
}
return sysUserService.resetPassword(username,oldpassword,password,confirmpassword);
}
@RequiresPermissions("sys:user:list")
//@RequiresPermissions("sys:user:list")
@RequestMapping(value = "/userRoleList", method = RequestMethod.GET)
public Result<IPage<SysUser>> userRoleList(@RequestParam(name="pageNo", defaultValue="1") Integer pageNo,
@RequestParam(name="pageSize", defaultValue="10") Integer pageSize, HttpServletRequest req) {
@@ -682,7 +682,7 @@ public class SysUserController {
* 部门用户列表
*/
@RequestMapping(value = "/departUserList", method = RequestMethod.GET)
@RequiresPermissions("sys:user:list")
//@RequiresPermissions("sys:user:list")
public Result<IPage<SysUser>> departUserList(@RequestParam(name="pageNo", defaultValue="1") Integer pageNo,
@RequestParam(name="pageSize", defaultValue="10") Integer pageSize, HttpServletRequest req) {
Result<IPage<SysUser>> result = new Result<IPage<SysUser>>();
@@ -729,7 +729,7 @@ public class SysUserController {
* 若某个用户包含多个部门,则会显示多条记录,可自行处理成单条记录
*/
@GetMapping("/queryByOrgCode")
@RequiresPermissions("sys:user:list")
//@RequiresPermissions("sys:user:list")
public Result<?> queryByDepartId(
@RequestParam(name = "pageNo", defaultValue = "1") Integer pageNo,
@RequestParam(name = "pageSize", defaultValue = "10") Integer pageSize,
@@ -815,7 +815,7 @@ public class SysUserController {
* 查询当前用户的所有部门/当前部门编码
* @return
*/
@RequiresPermissions("sys:user:list")
//@RequiresPermissions("sys:user:list")
@RequestMapping(value = "/getCurrentUserDeparts", method = RequestMethod.GET)
public Result<Map<String,Object>> getCurrentUserDeparts() {
try {
@@ -989,7 +989,7 @@ public class SysUserController {
*
* @return
*/
@RequiresPermissions("sys:user:list")
//@RequiresPermissions("sys:user:list")
@GetMapping("/getUserSectionInfoByToken")
public Result<?> getUserSectionInfoByToken(HttpServletRequest request, @RequestParam(name = "token", required = false) String token) {
try {
@@ -1027,7 +1027,7 @@ public class SysUserController {
* @param pageSize
* @return
*/
@RequiresPermissions("sys:user:list")
//@RequiresPermissions("sys:user:list")
@GetMapping("/appUserList")
public Result<?> appUserList(@RequestParam(name = "keyword", required = false) String keyword,
@RequestParam(name = "username", required = false) String username,
@@ -1064,7 +1064,7 @@ public class SysUserController {
*
* @return logicDeletedUserList
*/
@RequiresPermissions("sys:user:list")
//@RequiresPermissions("sys:user:list")
@GetMapping("/recycleBin")
public Result getRecycleBin() {
List<SysUser> logicDeletedUserList = sysUserService.queryLogicDeleted();
@@ -1085,7 +1085,7 @@ public class SysUserController {
* @param jsonObject
* @return
*/
@RequiresPermissions("sys:user:list")
//@RequiresPermissions("sys:user:list")
@RequestMapping(value = "/putRecycleBin", method = RequestMethod.PUT)
public Result putRecycleBin(@RequestBody JSONObject jsonObject, HttpServletRequest request) {
String userIds = jsonObject.getString("userIds");
@@ -1198,7 +1198,7 @@ public class SysUserController {
*
* @return Result
*/
@RequiresPermissions("sys:user:list")
//@RequiresPermissions("sys:user:list")
@GetMapping("/queryChildrenByUsername")
public Result queryChildrenByUsername(@RequestParam("userId") String userId) {
//获取用户信息