update:垂直越权接口补充权限注解

laws-module-system/src/main/java/com/jero/modules/system/controller/SysAnnouncementSendController.java

@@ -18,6 +18,7 @@ import com.jero.modules.system.service.ISysAnnouncementSendService;
 import lombok.extern.slf4j.Slf4j;
 import org.apache.commons.lang3.StringUtils;
 import org.apache.shiro.SecurityUtils;
+import org.apache.shiro.authz.annotation.RequiresPermissions;
 import org.springframework.beans.factory.annotation.Autowired;
 import org.springframework.web.bind.annotation.*;
 
@@ -199,6 +200,7 @@ public class SysAnnouncementSendController {
 	 */
 	@GetMapping(value = "/getMyAnnouncementSend")
 	@ApiOperationSupport(order = 8)
+	@RequiresPermissions("system:userAnnouncementList:search")
 	public Result<IPage<AnnouncementSendModel>> getMyAnnouncementSend(AnnouncementSendModel announcementSendModel,
                                                                       @RequestParam(name="pageNo", defaultValue="1") Integer pageNo,
                                                                       @RequestParam(name="pageSize", defaultValue="10") Integer pageSize) {
@@ -229,6 +231,7 @@ public class SysAnnouncementSendController {
 	 */
 	@PostMapping(value = "/readAll")
 	@ApiOperationSupport(order = 10)
+	@RequiresPermissions("system:userAnnouncementList:allLabelsRead")
 	public Result<SysAnnouncementSend> readAll() {
 		LoginUser sysUser = (LoginUser)SecurityUtils.getSubject().getPrincipal();
 		String userId = sysUser.getId();

laws-module-system/src/main/java/com/jero/modules/system/controller/SysPermissionController.java

@@ -26,6 +26,7 @@ import lombok.extern.slf4j.Slf4j;
 import org.apache.commons.lang3.StringUtils;
 import org.apache.poi.ss.formula.functions.T;
 import org.apache.shiro.SecurityUtils;
+import org.apache.shiro.authz.annotation.RequiresPermissions;
 import org.jetbrains.annotations.NotNull;
 import org.springframework.beans.factory.annotation.Autowired;
 import org.springframework.web.bind.annotation.*;
@@ -385,6 +386,7 @@ public class SysPermissionController {
 	 * @return
 	 */
 	@PostMapping("/saveRolePermission")
+	@RequiresPermissions("sys:role:permission")
 	public Result<String> saveRolePermission(@RequestBody JSONObject json) {
 		long start = System.currentTimeMillis();
 		try {

laws-module-system/src/main/java/com/jero/modules/system/controller/SysUserController.java

@@ -457,6 +457,7 @@ public class SysUserController {
      */
 //    @RequestMapping(value = "/changePassword", method = RequestMethod.PUT)
     @PostMapping("/changePassword")
+    @RequiresPermissions("user:password")
     public Result<T> changePassword(@RequestBody SysUser sysUser) {
         SysUser u = this.sysUserService.getOne(new LambdaQueryWrapper<SysUser>().eq(SysUser::getUsername, sysUser.getUsername()));
         if (u == null) {