【fix】去除用户列表的接口权限,规避查人、查角色接口无法获取数据的问题
This commit is contained in:
+8
-8
@@ -90,7 +90,7 @@ public class SysRoleController {
|
||||
* @param req
|
||||
* @return
|
||||
*/
|
||||
@RequiresPermissions("sys:role:list")
|
||||
//@RequiresPermissions("sys:role:list")
|
||||
@RequestMapping(value = "/page", method = RequestMethod.GET)
|
||||
public Result<IPage<SysRole>> queryPageList(SysRole role,
|
||||
@RequestParam(name="pageNo", defaultValue="1") Integer pageNo,
|
||||
@@ -182,7 +182,7 @@ public class SysRoleController {
|
||||
* @param id
|
||||
* @return
|
||||
*/
|
||||
@RequiresPermissions("sys:role:list")
|
||||
//@RequiresPermissions("sys:role:list")
|
||||
@RequestMapping(value = "/queryById", method = RequestMethod.GET)
|
||||
public Result<SysRole> queryById(@RequestParam(name="id",required=true) String id) {
|
||||
SysRole sysRole = sysRoleService.getById(id);
|
||||
@@ -192,7 +192,7 @@ public class SysRoleController {
|
||||
return Result.OK(sysRole);
|
||||
}
|
||||
}
|
||||
@RequiresPermissions("sys:role:list")
|
||||
//@RequiresPermissions("sys:role:list")
|
||||
@RequestMapping(value = "/queryall", method = RequestMethod.GET)
|
||||
public Result<List<SysRole>> queryall() {
|
||||
List<SysRole> list = sysRoleService.list();
|
||||
@@ -206,7 +206,7 @@ public class SysRoleController {
|
||||
/**
|
||||
* 校验角色编码唯一
|
||||
*/
|
||||
@RequiresPermissions("sys:role:list")
|
||||
//@RequiresPermissions("sys:role:list")
|
||||
@RequestMapping(value = "/checkRoleCode", method = RequestMethod.GET)
|
||||
public Result<Boolean> checkUsername(String id,String roleCode) {
|
||||
Result<Boolean> result = new Result<>();
|
||||
@@ -299,7 +299,7 @@ public class SysRoleController {
|
||||
/**
|
||||
* 查询数据规则数据
|
||||
*/
|
||||
@RequiresPermissions("sys:role:list")
|
||||
//@RequiresPermissions("sys:role:list")
|
||||
@GetMapping(value = "/datarule/{permissionId}/{roleId}")
|
||||
public Result<?> loadDatarule(@PathVariable("permissionId") String permissionId,@PathVariable("roleId") String roleId) {
|
||||
List<SysPermissionDataRule> list = sysPermissionDataRuleService.getPermRuleListByPermId(permissionId);
|
||||
@@ -329,7 +329,7 @@ public class SysRoleController {
|
||||
/**
|
||||
* 保存数据规则至角色菜单关联表
|
||||
*/
|
||||
@RequiresPermissions("sys:role:list")
|
||||
//@RequiresPermissions("sys:role:list")
|
||||
@PostMapping(value = "/datarule")
|
||||
public Result<?> saveDatarule(@RequestBody JSONObject jsonObject) {
|
||||
try {
|
||||
@@ -360,7 +360,7 @@ public class SysRoleController {
|
||||
* @param request
|
||||
* @return
|
||||
*/
|
||||
@RequiresPermissions("sys:role:list")
|
||||
//@RequiresPermissions("sys:role:list")
|
||||
@RequestMapping(value = "/queryTreeList", method = RequestMethod.GET)
|
||||
public Result<Map<String,Object>> queryTreeList(HttpServletRequest request) {
|
||||
Result<Map<String,Object>> result = new Result<>();
|
||||
@@ -386,7 +386,7 @@ public class SysRoleController {
|
||||
}
|
||||
return result;
|
||||
}
|
||||
@RequiresPermissions("sys:role:list")
|
||||
//@RequiresPermissions("sys:role:list")
|
||||
private void getTreeModelList(List<TreeModel> treeList,List<SysPermission> metaList,TreeModel temp) {
|
||||
for (SysPermission permission : metaList) {
|
||||
String tempPid = permission.getParentId();
|
||||
|
||||
+18
-18
@@ -95,7 +95,7 @@ public class SysUserController {
|
||||
* @param req
|
||||
* @return
|
||||
*/
|
||||
@RequiresPermissions("sys:user:list")
|
||||
//@RequiresPermissions("sys:user:list")
|
||||
@PermissionData(pageComponent = "system/UserList")
|
||||
@RequestMapping(value = "/page", method = RequestMethod.GET)
|
||||
public Result<IPage<SysUser>> queryPageList(SysUser user,
|
||||
@@ -238,7 +238,7 @@ public class SysUserController {
|
||||
}
|
||||
|
||||
|
||||
@RequiresPermissions("sys:user:list")
|
||||
//@RequiresPermissions("sys:user:list")
|
||||
@RequestMapping(value = "/frozenBatch", method = RequestMethod.PUT)
|
||||
public Result<Object> frozenBatch(@RequestBody JSONObject jsonObject) {
|
||||
try {
|
||||
@@ -258,7 +258,7 @@ public class SysUserController {
|
||||
return Result.OK("操作成功!");
|
||||
|
||||
}
|
||||
@RequiresPermissions("sys:user:list")
|
||||
//@RequiresPermissions("sys:user:list")
|
||||
@RequestMapping(value = "/queryById", method = RequestMethod.GET)
|
||||
public Result<SysUser> queryById(@RequestParam(name = "id", required = true) String id) {
|
||||
SysUser sysUser = sysUserService.getById(id);
|
||||
@@ -269,7 +269,7 @@ public class SysUserController {
|
||||
}
|
||||
}
|
||||
|
||||
@RequiresPermissions("sys:user:list")
|
||||
//@RequiresPermissions("sys:user:list")
|
||||
@RequestMapping(value = "/queryUserRole", method = RequestMethod.GET)
|
||||
public Result<List<String>> queryUserRole(@RequestParam(name = "userid", required = true) String userid) {
|
||||
List<String> list = new ArrayList<String>();
|
||||
@@ -292,7 +292,7 @@ public class SysUserController {
|
||||
* @param sysUser
|
||||
* @return
|
||||
*/
|
||||
@RequiresPermissions("sys:user:list")
|
||||
//@RequiresPermissions("sys:user:list")
|
||||
@RequestMapping(value = "/checkOnlyUser", method = RequestMethod.GET)
|
||||
public Result<Boolean> checkOnlyUser(SysUser sysUser) {
|
||||
Result<Boolean> result = new Result<>();
|
||||
@@ -336,7 +336,7 @@ public class SysUserController {
|
||||
* @param userId
|
||||
* @return
|
||||
*/
|
||||
@RequiresPermissions("sys:user:list")
|
||||
//@RequiresPermissions("sys:user:list")
|
||||
@RequestMapping(value = "/userDepartList", method = RequestMethod.GET)
|
||||
public Result<List<DepartIdModel>> getUserDepartsList(@RequestParam(name = "userId", required = true) String userId) {
|
||||
Result<List<DepartIdModel>> result = new Result<>();
|
||||
@@ -365,7 +365,7 @@ public class SysUserController {
|
||||
*
|
||||
* @return
|
||||
*/
|
||||
@RequiresPermissions("sys:user:list")
|
||||
//@RequiresPermissions("sys:user:list")
|
||||
@RequestMapping(value = "/generateUserId", method = RequestMethod.GET)
|
||||
public Result<String> generateUserId() {
|
||||
Result<String> result = new Result<>();
|
||||
@@ -382,7 +382,7 @@ public class SysUserController {
|
||||
* @param id
|
||||
* @return
|
||||
*/
|
||||
@RequiresPermissions("sys:user:list")
|
||||
//@RequiresPermissions("sys:user:list")
|
||||
@RequestMapping(value = "/queryUserByDepId", method = RequestMethod.GET)
|
||||
public Result<List<SysUser>> queryUserByDepId(@RequestParam(name = "id", required = true) String id,@RequestParam(name="realname",required=false) String realname) {
|
||||
Result<List<SysUser>> result = new Result<>();
|
||||
@@ -548,7 +548,7 @@ public class SysUserController {
|
||||
* @param userIds
|
||||
* @return
|
||||
*/
|
||||
@RequiresPermissions("sys:user:list")
|
||||
//@RequiresPermissions("sys:user:list")
|
||||
@RequestMapping(value = "/queryByIds", method = RequestMethod.GET)
|
||||
public Result<Collection<SysUser>> queryByIds(@RequestParam String userIds) {
|
||||
Result<Collection<SysUser>> result = new Result<>();
|
||||
@@ -592,7 +592,7 @@ public class SysUserController {
|
||||
}
|
||||
return sysUserService.resetPassword(username,oldpassword,password,confirmpassword);
|
||||
}
|
||||
@RequiresPermissions("sys:user:list")
|
||||
//@RequiresPermissions("sys:user:list")
|
||||
@RequestMapping(value = "/userRoleList", method = RequestMethod.GET)
|
||||
public Result<IPage<SysUser>> userRoleList(@RequestParam(name="pageNo", defaultValue="1") Integer pageNo,
|
||||
@RequestParam(name="pageSize", defaultValue="10") Integer pageSize, HttpServletRequest req) {
|
||||
@@ -682,7 +682,7 @@ public class SysUserController {
|
||||
* 部门用户列表
|
||||
*/
|
||||
@RequestMapping(value = "/departUserList", method = RequestMethod.GET)
|
||||
@RequiresPermissions("sys:user:list")
|
||||
//@RequiresPermissions("sys:user:list")
|
||||
public Result<IPage<SysUser>> departUserList(@RequestParam(name="pageNo", defaultValue="1") Integer pageNo,
|
||||
@RequestParam(name="pageSize", defaultValue="10") Integer pageSize, HttpServletRequest req) {
|
||||
Result<IPage<SysUser>> result = new Result<IPage<SysUser>>();
|
||||
@@ -729,7 +729,7 @@ public class SysUserController {
|
||||
* 若某个用户包含多个部门,则会显示多条记录,可自行处理成单条记录
|
||||
*/
|
||||
@GetMapping("/queryByOrgCode")
|
||||
@RequiresPermissions("sys:user:list")
|
||||
//@RequiresPermissions("sys:user:list")
|
||||
public Result<?> queryByDepartId(
|
||||
@RequestParam(name = "pageNo", defaultValue = "1") Integer pageNo,
|
||||
@RequestParam(name = "pageSize", defaultValue = "10") Integer pageSize,
|
||||
@@ -815,7 +815,7 @@ public class SysUserController {
|
||||
* 查询当前用户的所有部门/当前部门编码
|
||||
* @return
|
||||
*/
|
||||
@RequiresPermissions("sys:user:list")
|
||||
//@RequiresPermissions("sys:user:list")
|
||||
@RequestMapping(value = "/getCurrentUserDeparts", method = RequestMethod.GET)
|
||||
public Result<Map<String,Object>> getCurrentUserDeparts() {
|
||||
try {
|
||||
@@ -989,7 +989,7 @@ public class SysUserController {
|
||||
*
|
||||
* @return
|
||||
*/
|
||||
@RequiresPermissions("sys:user:list")
|
||||
//@RequiresPermissions("sys:user:list")
|
||||
@GetMapping("/getUserSectionInfoByToken")
|
||||
public Result<?> getUserSectionInfoByToken(HttpServletRequest request, @RequestParam(name = "token", required = false) String token) {
|
||||
try {
|
||||
@@ -1027,7 +1027,7 @@ public class SysUserController {
|
||||
* @param pageSize
|
||||
* @return
|
||||
*/
|
||||
@RequiresPermissions("sys:user:list")
|
||||
//@RequiresPermissions("sys:user:list")
|
||||
@GetMapping("/appUserList")
|
||||
public Result<?> appUserList(@RequestParam(name = "keyword", required = false) String keyword,
|
||||
@RequestParam(name = "username", required = false) String username,
|
||||
@@ -1064,7 +1064,7 @@ public class SysUserController {
|
||||
*
|
||||
* @return logicDeletedUserList
|
||||
*/
|
||||
@RequiresPermissions("sys:user:list")
|
||||
//@RequiresPermissions("sys:user:list")
|
||||
@GetMapping("/recycleBin")
|
||||
public Result getRecycleBin() {
|
||||
List<SysUser> logicDeletedUserList = sysUserService.queryLogicDeleted();
|
||||
@@ -1085,7 +1085,7 @@ public class SysUserController {
|
||||
* @param jsonObject
|
||||
* @return
|
||||
*/
|
||||
@RequiresPermissions("sys:user:list")
|
||||
//@RequiresPermissions("sys:user:list")
|
||||
@RequestMapping(value = "/putRecycleBin", method = RequestMethod.PUT)
|
||||
public Result putRecycleBin(@RequestBody JSONObject jsonObject, HttpServletRequest request) {
|
||||
String userIds = jsonObject.getString("userIds");
|
||||
@@ -1198,7 +1198,7 @@ public class SysUserController {
|
||||
*
|
||||
* @return Result
|
||||
*/
|
||||
@RequiresPermissions("sys:user:list")
|
||||
//@RequiresPermissions("sys:user:list")
|
||||
@GetMapping("/queryChildrenByUsername")
|
||||
public Result queryChildrenByUsername(@RequestParam("userId") String userId) {
|
||||
//获取用户信息
|
||||
|
||||
Reference in New Issue
Block a user