ZQ/laws-sinotruk-server
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix 78557 【垂直越权】动态消息-部分接口未处理垂直越权

Browse Source
This commit is contained in:
liao
2023-11-27 09:21:18 +08:00
parent e9d70ca171
commit 45e0c5dd8d
1 changed files with 1 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
laws-modules/src/main/java/com/jero/modules/personal/controller/LawsStandardSharingController.java
+1
View File
@@ -252,6 +252,7 @@ public class LawsStandardSharingController extends JeroController<LawsStandardSh
@ApiOperation(value = "标准分享-动态消息分享", notes = "标准分享-动态消息分享") @ApiOperation(value = "标准分享-动态消息分享", notes = "标准分享-动态消息分享")
@PostMapping(value = "/dynamicMessages/add") @PostMapping(value = "/dynamicMessages/add")
@ApiOperationSupport(order = 6) @ApiOperationSupport(order = 6)
@RequiresPermissions("dynamicMessage:share")
public Result<T> dynamicMessages(@RequestBody LawsStandardSharing lawsStandardSharing) { public Result<T> dynamicMessages(@RequestBody LawsStandardSharing lawsStandardSharing) {
LoginUser sysUser = (LoginUser) SecurityUtils.getSubject().getPrincipal(); LoginUser sysUser = (LoginUser) SecurityUtils.getSubject().getPrincipal();
SysUser user = sysUserService.getById(sysUser.getId()); SysUser user = sysUserService.getById(sysUser.getId());