fix(文档拆分): 水平越权问题修复
This commit is contained in:
+11
@@ -3,7 +3,9 @@ package com.jero.modules.split.controller;
|
|||||||
import com.alibaba.fastjson.JSONObject;
|
import com.alibaba.fastjson.JSONObject;
|
||||||
import com.jero.common.api.vo.Result;
|
import com.jero.common.api.vo.Result;
|
||||||
import com.jero.common.system.base.controller.JeroController;
|
import com.jero.common.system.base.controller.JeroController;
|
||||||
|
import com.jero.modules.laws.documenttool.service.IDocumentSplitService;
|
||||||
import com.jero.modules.split.entity.SarFileSplitMenuEO;
|
import com.jero.modules.split.entity.SarFileSplitMenuEO;
|
||||||
|
import com.jero.modules.split.mapper.SarFileSplitMenuEOMapper;
|
||||||
import com.jero.modules.split.page.SarFileSplitMenuEOPage;
|
import com.jero.modules.split.page.SarFileSplitMenuEOPage;
|
||||||
import com.jero.modules.split.service.IFileSplitItemsEOService;
|
import com.jero.modules.split.service.IFileSplitItemsEOService;
|
||||||
import com.jero.modules.split.service.ISarFileSplitMenuEOService;
|
import com.jero.modules.split.service.ISarFileSplitMenuEOService;
|
||||||
@@ -32,6 +34,12 @@ public class SarFileSplitMenuEOController extends JeroController<SarFileSplitMen
|
|||||||
@Autowired
|
@Autowired
|
||||||
private IFileSplitItemsEOService fileSplitItemsEOService;
|
private IFileSplitItemsEOService fileSplitItemsEOService;
|
||||||
|
|
||||||
|
@Autowired
|
||||||
|
private SarFileSplitMenuEOMapper sarFileSplitMenuEOMapper;
|
||||||
|
|
||||||
|
@Autowired
|
||||||
|
private IDocumentSplitService documentSplitService;
|
||||||
|
|
||||||
@ApiOperation(value = "标准拆分条款目录-查询Y")
|
@ApiOperation(value = "标准拆分条款目录-查询Y")
|
||||||
@GetMapping("/getSplitMenusByInfoId")
|
@GetMapping("/getSplitMenusByInfoId")
|
||||||
@RequiresPermissions("split:sarFileSplitItems:page")
|
@RequiresPermissions("split:sarFileSplitItems:page")
|
||||||
@@ -69,6 +77,9 @@ public class SarFileSplitMenuEOController extends JeroController<SarFileSplitMen
|
|||||||
@GetMapping("/deleteMenu")
|
@GetMapping("/deleteMenu")
|
||||||
@RequiresPermissions("split:sarFileSplitMenu:delete")
|
@RequiresPermissions("split:sarFileSplitMenu:delete")
|
||||||
public Result delete(@ApiParam(value = "id") @RequestParam(name="id") String id) throws Exception {
|
public Result delete(@ApiParam(value = "id") @RequestParam(name="id") String id) throws Exception {
|
||||||
|
// 水平越权
|
||||||
|
SarFileSplitMenuEO sarFileSplitMenuEO = sarFileSplitMenuEOMapper.selectByPrimaryKey(id);
|
||||||
|
documentSplitService.isHorizontalOverstep(sarFileSplitMenuEO.getInfoId());
|
||||||
sarFileSplitMenuEOService.deleteMenu(id);
|
sarFileSplitMenuEOService.deleteMenu(id);
|
||||||
return Result.OK("删除成功",null);
|
return Result.OK("删除成功",null);
|
||||||
}
|
}
|
||||||
|
|||||||
-3
@@ -124,9 +124,6 @@ public class SarFileSplitMenuEOServiceImpl extends ServiceImpl<SarFileSplitMenuE
|
|||||||
}
|
}
|
||||||
|
|
||||||
public void deleteMenu(String id){
|
public void deleteMenu(String id){
|
||||||
SarFileSplitMenuEO sarFileSplitMenuEO = dao.selectByPrimaryKey(id);
|
|
||||||
// 水平越权
|
|
||||||
//documentSplitService.isHorizontalOverstep(sarFileSplitMenuEO.getInfoId());
|
|
||||||
List<String> menuIds = new ArrayList<>();
|
List<String> menuIds = new ArrayList<>();
|
||||||
SarFileSplitMenuEO sarMenuEO = new SarFileSplitMenuEO();
|
SarFileSplitMenuEO sarMenuEO = new SarFileSplitMenuEO();
|
||||||
sarMenuEO.setId(id);
|
sarMenuEO.setId(id);
|
||||||
|
|||||||
Reference in New Issue
Block a user