KH/kh-device-admin
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

【修改】 消息中心-系统报告，模板管理，消息管理 按钮水平越权 （修改db文件）

Browse Source
This commit is contained in:
bupengxiang
2023-08-03 10:19:28 +08:00
parent b99ce3f987
commit ae9468a9ea
6 changed files with 121 additions and 13 deletions
Download Patch File Download Diff File Expand all files Collapse all files
jero-boot/jero-boot-module-system/src/main/java/com/jero/modules/message/controller/SysMessageController.java
+4
View File
@@ -4,6 +4,7 @@ import com.baomidou.mybatisplus.core.conditions.query.QueryWrapper;
import com.baomidou.mybatisplus.core.metadata.IPage;
import com.baomidou.mybatisplus.extension.plugins.pagination.Page;
import com.jero.common.api.vo.Results;
import com.jero.common.aspect.annotation.PermissionData;
import com.jero.common.system.base.controller.JeroController;
import com.jero.common.system.query.QueryGenerator;
import com.jero.modules.message.entity.SysMessage;
@@ -11,6 +12,7 @@ import com.jero.modules.message.service.ISysMessageService;
import lombok.extern.slf4j.Slf4j;
import org.apache.commons.lang.StringUtils;
import org.apache.poi.ss.formula.functions.T;
import org.apache.shiro.authz.annotation.RequiresPermissions;
import org.springframework.beans.factory.annotation.Autowired;
import org.springframework.web.bind.annotation.*;
import org.springframework.web.servlet.ModelAndView;
@@ -43,6 +45,7 @@ public class SysMessageController extends JeroController<SysMessage, ISysMessage
* @return
*/
@GetMapping(value = "/page")
@PermissionData("modules/message/sysMessageList")
public Results<IPage<SysMessage>> queryPageList(SysMessage sysMessage, @RequestParam(name = "pageNo", defaultValue = "1") Integer pageNo,
@RequestParam(name = "pageSize", defaultValue = "10") Integer pageSize, HttpServletRequest req) {
QueryWrapper<SysMessage> queryWrapper = QueryGenerator.initQueryWrapper(sysMessage, req.getParameterMap());
@@ -83,6 +86,7 @@ public class SysMessageController extends JeroController<SysMessage, ISysMessage
* @return
*/
@PostMapping(value = "/delete")
@RequiresPermissions("message:del")
public Results<T> delete(@RequestBody Map<String, String> map) {
String id = map.get("id");
if(StringUtils.isBlank(id)){
jero-boot/jero-boot-module-system/src/main/java/com/jero/modules/message/controller/SysMessageTemplateController.java
+9
View File
@@ -5,6 +5,7 @@ import com.baomidou.mybatisplus.core.conditions.query.QueryWrapper;
import com.baomidou.mybatisplus.core.metadata.IPage;
import com.baomidou.mybatisplus.extension.plugins.pagination.Page;
import com.jero.common.api.vo.Results;
import com.jero.common.aspect.annotation.PermissionData;
import com.jero.common.system.base.controller.JeroController;
import com.jero.common.system.query.QueryGenerator;
import com.jero.modules.message.entity.MsgParams;
@@ -14,6 +15,7 @@ import com.jero.modules.message.util.PushMsgUtil;
import lombok.extern.slf4j.Slf4j;
import org.apache.commons.lang.StringUtils;
import org.apache.poi.ss.formula.functions.T;
import org.apache.shiro.authz.annotation.RequiresPermissions;
import org.springframework.beans.factory.annotation.Autowired;
import org.springframework.web.bind.annotation.*;
import org.springframework.web.servlet.ModelAndView;
@@ -48,6 +50,7 @@ public class SysMessageTemplateController extends JeroController<SysMessageTempl
* @return
*/
@GetMapping(value = "/page")
@PermissionData("modules/message/sysMessageTemplateList")
public Results<IPage<SysMessageTemplate>> queryPageList(SysMessageTemplate sysMessageTemplate, @RequestParam(name = "pageNo", defaultValue = "1") Integer pageNo,
@RequestParam(name = "pageSize", defaultValue = "10") Integer pageSize, HttpServletRequest req) {
QueryWrapper<SysMessageTemplate> queryWrapper = QueryGenerator.initQueryWrapper(sysMessageTemplate, req.getParameterMap());
@@ -63,6 +66,7 @@ public class SysMessageTemplateController extends JeroController<SysMessageTempl
* @return
*/
@PostMapping(value = "/add")
@RequiresPermissions("message:template:add")
public Results<T> add(@RequestBody SysMessageTemplate sysMessageTemplate) {
sysMessageTemplateService.save(sysMessageTemplate);
return Results.OK("操作成功!");
@@ -75,6 +79,7 @@ public class SysMessageTemplateController extends JeroController<SysMessageTempl
* @return
*/
@PostMapping(value = "/edit")
@RequiresPermissions("message:template:edit")
public Results<T> edit(@RequestBody SysMessageTemplate sysMessageTemplate) {
sysMessageTemplateService.updateById(sysMessageTemplate);
return Results.OK("更新成功！");
@@ -87,6 +92,7 @@ public class SysMessageTemplateController extends JeroController<SysMessageTempl
* @return
*/
@PostMapping(value = "/delete")
@RequiresPermissions("message:template:del")
public Results<T> delete(@RequestBody Map<String, String> map) {
String id = map.get("id");
if(StringUtils.isBlank(id)){
@@ -130,6 +136,7 @@ public class SysMessageTemplateController extends JeroController<SysMessageTempl
* @param request
*/
@GetMapping(value = "/exportXls")
@RequiresPermissions("message:template:export")
public ModelAndView exportXls(HttpServletRequest request,SysMessageTemplate sysMessageTemplate) {
return super.exportXls(request, sysMessageTemplate, SysMessageTemplate.class,"推送消息模板");
}
@@ -142,6 +149,7 @@ public class SysMessageTemplateController extends JeroController<SysMessageTempl
* @return
*/
@PostMapping(value = "/importExcel")
@RequiresPermissions("message:template:import")
public Results<SysMessageTemplate> importExcel(HttpServletRequest request, HttpServletResponse response) {
return super.importExcel(request, response, SysMessageTemplate.class);
}
@@ -150,6 +158,7 @@ public class SysMessageTemplateController extends JeroController<SysMessageTempl
* 发送消息
*/
@PostMapping(value = "/sendMsg")
@RequiresPermissions("message:template:send")
public Results<Object> sendMessage(@RequestBody MsgParams msgParams) {
Map<String, String> map = null;
try {
jero-boot/jero-boot-module-system/src/main/java/com/jero/modules/system/controller/SysAnnouncementController.java
+7
View File
@@ -7,6 +7,7 @@ import com.baomidou.mybatisplus.core.metadata.IPage;
import com.baomidou.mybatisplus.extension.plugins.pagination.Page;
import com.jero.common.api.vo.Results;
import com.jero.common.aspect.annotation.AutoLog;
import com.jero.common.aspect.annotation.PermissionData;
import com.jero.common.constant.CommonConstant;
import com.jero.common.constant.CommonSendStatus;
import com.jero.common.constant.WebsocketConst;
@@ -26,6 +27,7 @@ import lombok.extern.slf4j.Slf4j;
import org.apache.commons.lang.StringUtils;
import org.apache.poi.ss.formula.functions.T;
import org.apache.shiro.SecurityUtils;
import org.apache.shiro.authz.annotation.RequiresPermissions;
import org.springframework.beans.factory.annotation.Autowired;
import org.springframework.context.annotation.Lazy;
import org.springframework.http.HttpStatus;
@@ -76,6 +78,7 @@ public class SysAnnouncementController {
*/
@GetMapping("/page")
@AutoLog(operateType = 1,value = "查询系统通告")
@PermissionData("isystem/annountCement")
public Results<IPage<SysAnnouncement>> queryPageList(SysAnnouncement sysAnnouncement,
@RequestParam(name="pageNo", defaultValue="1") Integer pageNo,
@RequestParam(name="pageSize", defaultValue="10") Integer pageSize,
@@ -107,6 +110,7 @@ public class SysAnnouncementController {
*/
@PostMapping("/add")
@AutoLog(operateType = 2,value = "新增系统通告")
@RequiresPermissions("annount:cement:add")
public Results<Object> add(@RequestBody SysAnnouncement sysAnnouncement) {
try {
// update-begin-author:liusq date:20210804 for:标题处理xss攻击的问题
@@ -130,6 +134,7 @@ public class SysAnnouncementController {
*/
@PostMapping("/edit")
@AutoLog(operateType = 3,value = "修改系统通告")
@RequiresPermissions("annount:cement:edit")
public Results<Object> eidt(@RequestBody SysAnnouncement sysAnnouncement) {
SysAnnouncement sysAnnouncementEntity = sysAnnouncementService.getById(sysAnnouncement.getId());
if(sysAnnouncementEntity==null) {
@@ -155,6 +160,7 @@ public class SysAnnouncementController {
*/
@PostMapping("/delete")
@AutoLog(operateType = 4,value = "删除系统通告")
@RequiresPermissions("annount:cement:del")
public Results<Object> delete(@RequestBody Map<String, String> map) {
String id = map.get("id");
if(StringUtils.isBlank(id)){
@@ -217,6 +223,7 @@ public class SysAnnouncementController {
* @return
*/
@GetMapping("/doReleaseData")
@RequiresPermissions("annount:cement:send")
public Results<SysAnnouncement> doReleaseData(@RequestParam(name="id",required=true) String id, HttpServletRequest request) {
SysAnnouncement sysAnnouncement = sysAnnouncementService.getById(id);
if(sysAnnouncement==null) {