From 353e33f8fe4aa2555b8b9485a77ff2a3ced1d565 Mon Sep 17 00:00:00 2001
From: yjz <3131811435@qq.com>
Date: Thu, 4 Jan 2024 14:43:37 +0800
Subject: [PATCH] =?UTF-8?q?fix(=E6=96=87=E6=A1=A3=E6=8B=86=E5=88=86):=20?=
 =?UTF-8?q?=E4=B8=B4=E6=97=B6=E6=8F=90=E4=BA=A4?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 .../documenttool/controller/DocumentSplitController.java | 4 ----
 .../service/impl/DocumentSplitServiceImpl.java           | 9 ++++++++-
 2 files changed, 8 insertions(+), 5 deletions(-)

diff --git a/laws-modules/src/main/java/com/jero/modules/laws/documenttool/controller/DocumentSplitController.java b/laws-modules/src/main/java/com/jero/modules/laws/documenttool/controller/DocumentSplitController.java
index f0c5e2da..876c2ada 100644
--- a/laws-modules/src/main/java/com/jero/modules/laws/documenttool/controller/DocumentSplitController.java
+++ b/laws-modules/src/main/java/com/jero/modules/laws/documenttool/controller/DocumentSplitController.java
@@ -292,7 +292,6 @@ public class DocumentSplitController {
     @RequiresPermissions("split:sarFileSplitItems:update")
     @ApiOperationSupport(order = 14)
     public Result<T> editDocumentSplitDetail(@RequestBody @ApiParam("标签管理") Map<String, Object> parameter) {
-        documentSplitService.isHorizontalOverstep((String) parameter.get("id"));
         documentSplitService.editDocumentSplitDetail(parameter);
         return Result.OK(MessageUtils.getMessage(ResultCommon.OK));
     }
@@ -308,7 +307,6 @@ public class DocumentSplitController {
     @RequiresPermissions("split:sarFileSplitItems:batchDelete")
     @ApiOperationSupport(order = 15)
     public Result<T> editBatchDocumentSplitDetail(@RequestBody @ApiParam("标签管理") Map<String, Object> parameter) {
-        documentSplitService.isHorizontalOverstep((String) parameter.get("ids"));
         try {
             documentSplitService.editBatchDocumentSplitDetail(parameter);
             return Result.OK(MessageUtils.getMessage(ResultCommon.OK));
@@ -329,7 +327,6 @@ public class DocumentSplitController {
     @RequiresPermissions("split:sarFileSplitItems:delete")
     @ApiOperationSupport(order = 16)
     public Result<T> deleteDocumentSplitDetail(@RequestBody Map<String, Object> parameter) {
-        documentSplitService.isHorizontalOverstep((String) parameter.get("id"));
         documentSplitService.deleteDocumentSplitDetail(parameter);
         return Result.OK(MessageUtils.getMessage(ResultCommon.OK));
     }
@@ -344,7 +341,6 @@ public class DocumentSplitController {
     @PostMapping(value = "/deleteBatchDocumentSplitDetail")
     @ApiOperationSupport(order = 17)
     public Result<T> deleteBatchDocumentSplitDetail(@RequestBody Map<String, Object> parameter) {
-        documentSplitService.isHorizontalOverstep((String) parameter.get("ids"));
         documentSplitService.deleteBatchDocumentSplitDetail(parameter);
         return Result.OK(MessageUtils.getMessage(ResultCommon.OK));
     }
diff --git a/laws-modules/src/main/java/com/jero/modules/laws/documenttool/service/impl/DocumentSplitServiceImpl.java b/laws-modules/src/main/java/com/jero/modules/laws/documenttool/service/impl/DocumentSplitServiceImpl.java
index 903f5fbb..c1ddd651 100644
--- a/laws-modules/src/main/java/com/jero/modules/laws/documenttool/service/impl/DocumentSplitServiceImpl.java
+++ b/laws-modules/src/main/java/com/jero/modules/laws/documenttool/service/impl/DocumentSplitServiceImpl.java
@@ -687,6 +687,9 @@ public class DocumentSplitServiceImpl implements IDocumentSplitService {
         StringBuilder strSelectCondition = new StringBuilder(selectCondition);
         // 查询数据
         List<Map<String, Object>> listMap = documentSplitMapper.queryDocumentSplitDetail(selectColumn, strSelectCondition.toString());
+        // 水平越权
+        String infoIds = listMap.stream().map(v -> v.get(INFO_ID).toString()).collect(Collectors.joining(","));
+        isHorizontalOverstep(infoIds);
         // 排序（根据条文号）
         listMap.sort(new DirectoryComparator());
         // 第一条数据
@@ -747,7 +750,9 @@ public class DocumentSplitServiceImpl implements IDocumentSplitService {
     @Override
     public void deleteDocumentSplitDetail(Map<String, Object> parameter) {
         String id = (String) parameter.get(ID);
-
+        // 水平越权
+        Map<String, Object> map = documentSplitMapper.queryLawsDocumentSplitInId(id);
+        isHorizontalOverstep(map.get(INFO_ID).toString());
         // 删除文档拆分详情数据
         documentSplitMapper.deleteDocumentSplitDetail(id);
 
@@ -784,6 +789,8 @@ public class DocumentSplitServiceImpl implements IDocumentSplitService {
         LoginUser loginUser = (LoginUser) SecurityUtils.getSubject().getPrincipal();
         // 查询数据
         Map<String, Object> resultMap = documentSplitMapper.queryLawsDocumentSplitById(id);
+        // 水平越权
+        isHorizontalOverstep(resultMap.get(INFO_ID).toString());
         // 字段名
         StringBuilder fieldsBuilder = new StringBuilder();
         // 字段值