From a002148a0d5a15eb7e879f257c1564f337b9f441 Mon Sep 17 00:00:00 2001
From: liao <liao@syxysoft.com>
Date: Tue, 31 Oct 2023 16:05:04 +0800
Subject: [PATCH] =?UTF-8?q?update=20=E8=B5=84=E6=96=99=E4=B8=AD=E5=BF=83-?=
 =?UTF-8?q?=E6=9D=83=E9=99=90?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 .../controller/LawsDataCenterFileController.java       | 10 ++++++++++
 .../controller/LawsDataCenterFolderController.java     |  5 +++++
 2 files changed, 15 insertions(+)

diff --git a/laws-modules/src/main/java/com/jero/modules/laws/dataCenter/controller/LawsDataCenterFileController.java b/laws-modules/src/main/java/com/jero/modules/laws/dataCenter/controller/LawsDataCenterFileController.java
index 463c9182..58730818 100644
--- a/laws-modules/src/main/java/com/jero/modules/laws/dataCenter/controller/LawsDataCenterFileController.java
+++ b/laws-modules/src/main/java/com/jero/modules/laws/dataCenter/controller/LawsDataCenterFileController.java
@@ -17,6 +17,7 @@ import com.baomidou.mybatisplus.core.metadata.IPage;
 import com.jero.modules.system.controller.CommonController;
 import lombok.extern.slf4j.Slf4j;
 import com.jero.common.system.base.controller.JeroController;
+import org.apache.shiro.authz.annotation.RequiresPermissions;
 import org.springframework.beans.factory.annotation.Autowired;
 import org.springframework.validation.annotation.Validated;
 import org.springframework.web.bind.annotation.*;
@@ -43,6 +44,8 @@ public class LawsDataCenterFileController extends JeroController<LawsDataCenterF
     @Autowired
     private CommonController commonController;
 
+    private final static String permissionFlag = "profileCenter:table"; // 权限标识
+
     /**
      * 分页列表查询
      *
@@ -54,6 +57,7 @@ public class LawsDataCenterFileController extends JeroController<LawsDataCenterF
     @AutoLog(value = "资料中心-文件数据-分页列表查询")
     @ApiOperation(value = "资料中心-文件数据-分页列表查询", notes = "资料中心-文件数据-分页列表查询")
     @GetMapping(value = "/page")
+    @RequiresPermissions(permissionFlag)
     public Result<IPage<LawsDataCenterFile>> queryPageList(LawsDataCenterFile lawsDataCenterFile,
                                                            @RequestParam(name = "pageNo", defaultValue = "1") Integer pageNo,
                                                            @RequestParam(name = "pageSize", defaultValue = "10") Integer pageSize) {
@@ -70,6 +74,7 @@ public class LawsDataCenterFileController extends JeroController<LawsDataCenterF
     @AutoLog(value = "资料中心-文件数据-添加")
     @ApiOperation(value = "资料中心-文件数据-添加", notes = "资料中心-文件数据-添加")
     @PostMapping(value = "/add")
+    @RequiresPermissions(permissionFlag)
     public Result<T> add(@Validated @RequestBody LawsDataCenterFile lawsDataCenterFile) {
         lawsDataCenterFileService.add(lawsDataCenterFile);
         return Result.OK(MessageUtils.getMessage(ResultCommon.OK));
@@ -84,6 +89,7 @@ public class LawsDataCenterFileController extends JeroController<LawsDataCenterF
     @AutoLog(value = "资料中心-文件数据-编辑")
     @ApiOperation(value = "资料中心-文件数据-编辑", notes = "资料中心-文件数据-编辑")
     @PostMapping(value = "/edit")
+    @RequiresPermissions(permissionFlag)
     public Result<T> edit(@Validated @RequestBody LawsDataCenterFile lawsDataCenterFile) {
         lawsDataCenterFileService.editById(lawsDataCenterFile);
         return Result.OK(MessageUtils.getMessage(ResultCommon.OK));
@@ -98,6 +104,7 @@ public class LawsDataCenterFileController extends JeroController<LawsDataCenterF
     @AutoLog(value = "资料中心-文件数据-通过id删除")
     @ApiOperation(value = "资料中心-文件数据-通过id删除", notes = "资料中心-文件数据-通过id删除")
     @PostMapping(value = "/delete")
+    @RequiresPermissions(permissionFlag)
     public Result<T> delete(@RequestBody Map<String, String> map) {
         if (!map.containsKey("id") || StringUtils.isEmpty(map.get("id"))) {
             return Result.error("请选择数据!");
@@ -115,6 +122,7 @@ public class LawsDataCenterFileController extends JeroController<LawsDataCenterF
     @AutoLog(value = "资料中心-文件数据-批量删除")
     @ApiOperation(value = "资料中心-文件数据-批量删除", notes = "资料中心-文件数据-批量删除")
     @PostMapping(value = "/deleteBatch")
+    @RequiresPermissions(permissionFlag)
     public Result<T> deleteBatch(@RequestBody Map<String, String> map) {
         if (!map.containsKey("ids") || StringUtils.isEmpty(map.get("ids"))) {
             return Result.error("请选择数据!");
@@ -132,6 +140,7 @@ public class LawsDataCenterFileController extends JeroController<LawsDataCenterF
     @AutoLog(value = "资料中心-文件数据-通过id查询")
     @ApiOperation(value = "资料中心-文件数据-通过id查询", notes = "资料中心-文件数据-通过id查询")
     @GetMapping(value = "/queryById")
+    @RequiresPermissions(permissionFlag)
     public Result<LawsDataCenterFile> queryById(@RequestParam(name = "id") String id) {
         LawsDataCenterFile lawsDataCenterFile = lawsDataCenterFileService.queryById(id);
         if (lawsDataCenterFile == null) {
@@ -143,6 +152,7 @@ public class LawsDataCenterFileController extends JeroController<LawsDataCenterF
     @AutoLog(value = "资料中心-文件数据-下载")
     @ApiOperation(value = "资料中心-文件数据-下载", notes = "资料中心-文件数据-下载")
     @GetMapping(value = "/download")
+    @RequiresPermissions(permissionFlag)
     public void download(@RequestParam(name = "id") String id, HttpServletRequest request, HttpServletResponse response) {
         LawsDataCenterFile file = lawsDataCenterFileService.queryById(id);
         if (file == null) {
diff --git a/laws-modules/src/main/java/com/jero/modules/laws/dataCenter/controller/LawsDataCenterFolderController.java b/laws-modules/src/main/java/com/jero/modules/laws/dataCenter/controller/LawsDataCenterFolderController.java
index ed1545ad..52894672 100644
--- a/laws-modules/src/main/java/com/jero/modules/laws/dataCenter/controller/LawsDataCenterFolderController.java
+++ b/laws-modules/src/main/java/com/jero/modules/laws/dataCenter/controller/LawsDataCenterFolderController.java
@@ -12,6 +12,7 @@ import com.jero.modules.laws.dataCenter.entity.LawsDataCenterFolder;
 import com.jero.modules.laws.dataCenter.service.ILawsDataCenterFolderService;
 import lombok.extern.slf4j.Slf4j;
 import com.jero.common.system.base.controller.JeroController;
+import org.apache.shiro.authz.annotation.RequiresPermissions;
 import org.springframework.beans.factory.annotation.Autowired;
 import org.springframework.validation.annotation.Validated;
 import org.springframework.web.bind.annotation.*;
@@ -53,6 +54,7 @@ public class LawsDataCenterFolderController extends JeroController<LawsDataCente
     @AutoLog(value = "资料中心-文件夹-新增同级")
     @ApiOperation(value = "资料中心-文件夹-新增同级", notes = "资料中心-文件夹-新增同级")
     @PostMapping(value = "/addBrother")
+    @RequiresPermissions("profileCenter:addPeer")
     public Result<T> addBrother(@Validated @RequestBody LawsDataCenterFolder lawsDataCenterFolder) {
         lawsDataCenterFolderService.add(lawsDataCenterFolder);
         return Result.OK(MessageUtils.getMessage(ResultCommon.OK));
@@ -61,6 +63,7 @@ public class LawsDataCenterFolderController extends JeroController<LawsDataCente
     @AutoLog(value = "资料中心-文件夹-新增子级")
     @ApiOperation(value = "资料中心-文件夹-新增子级", notes = "资料中心-文件夹-新增子级")
     @PostMapping(value = "/addChild")
+    @RequiresPermissions("profileCenter:addChildren")
     public Result<T> addChild(@Validated @RequestBody LawsDataCenterFolder lawsDataCenterFolder) {
 		if (StringUtils.isBlank(lawsDataCenterFolder.getParentId())) {
             throw new JeroBootException(ResultCommon.EMPTY_COMMON, "parentId");
@@ -78,6 +81,7 @@ public class LawsDataCenterFolderController extends JeroController<LawsDataCente
     @AutoLog(value = "资料中心-文件夹-编辑")
     @ApiOperation(value = "资料中心-文件夹-编辑", notes = "资料中心-文件夹-编辑")
     @PostMapping(value = "/edit")
+    @RequiresPermissions("profileCenter:editFolder")
     public Result<T> edit(@Validated @RequestBody LawsDataCenterFolder lawsDataCenterFolder) {
         lawsDataCenterFolderService.editById(lawsDataCenterFolder);
         return Result.OK(MessageUtils.getMessage(ResultCommon.OK));
@@ -92,6 +96,7 @@ public class LawsDataCenterFolderController extends JeroController<LawsDataCente
     @AutoLog(value = "资料中心-文件夹-通过id删除")
     @ApiOperation(value = "资料中心-文件夹-通过id删除", notes = "资料中心-文件夹-通过id删除")
     @PostMapping(value = "/delete")
+    @RequiresPermissions("profileCenter:deleteFolder")
     public Result<T> delete(@RequestBody Map<String, String> map) {
         if (!map.containsKey("id") || StringUtils.isEmpty(map.get("id"))) {
             return Result.error("请选择数据!");