ZQ/laws-sinotruk-server
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix 78578 【水平越权】动态消息--部分接口没处理水平越权

Browse Source
This commit is contained in:
liao
2023-11-27 10:04:43 +08:00
parent 45e0c5dd8d
commit 6246f3697a
2 changed files with 47 additions and 13 deletions
Download Patch File Download Diff File Expand all files Collapse all files
laws-modules/src/main/java/com/jero/modules/personal/controller/LawsStandardSharingController.java
+4 -1
View File
@@ -258,12 +258,15 @@ public class LawsStandardSharingController extends JeroController<LawsStandardSh
SysUser user = sysUserService.getById(sysUser.getId());
String recipientId = lawsStandardSharing.getRecipientId();
Date date = new Date();
LawsNewsFeed lawsNewsFeed = lawsNewsFeedService.getById(lawsStandardSharing.getStandardId());
if (0 == lawsNewsFeed.getReleaseStatus()) {
throw new JeroBootException("未发布的消息不能进行分享");
}
List<LawsStandardSharing> sharings = new ArrayList<>();
List<String> recipientIdList = Arrays.asList(recipientId.split(","));
for (int i = 0; i < recipientIdList.size(); i++) {
LawsStandardSharing sharing = new LawsStandardSharing();
sharing.setStandardId(lawsStandardSharing.getStandardId());
LawsNewsFeed lawsNewsFeed = lawsNewsFeedService.getById(lawsStandardSharing.getStandardId());
sharing.setRubric(lawsNewsFeed.getDynamicHeading());
sharing.setSource(CommonConstant.STANDARD_SOURCE_4);
sharing.setSharerId(sysUser.getId());