fix 80377 【垂直越权】未符合项详情所有接口未做垂直越权
This commit is contained in:
+7
@@ -15,6 +15,7 @@ import com.jero.modules.system.vo.IdsMapBody;
|
||||
import lombok.extern.slf4j.Slf4j;
|
||||
import com.jero.common.system.base.controller.JeroController;
|
||||
import org.apache.commons.lang3.StringUtils;
|
||||
import org.apache.shiro.authz.annotation.RequiresPermissions;
|
||||
import org.springframework.beans.factory.annotation.Autowired;
|
||||
import org.springframework.validation.annotation.Validated;
|
||||
import org.springframework.web.bind.annotation.*;
|
||||
@@ -47,6 +48,7 @@ public class LawsEvaluationNotMetController extends JeroController<LawsEvaluatio
|
||||
/**
|
||||
* 分页列表查询
|
||||
*/
|
||||
@RequiresPermissions("inconformityItem:search")
|
||||
@AutoLog(value = "未符合项-分页列表查询")
|
||||
@ApiOperation(value="未符合项-分页列表查询", notes="未符合项-分页列表查询")
|
||||
@GetMapping(value = "/page")
|
||||
@@ -61,6 +63,7 @@ public class LawsEvaluationNotMetController extends JeroController<LawsEvaluatio
|
||||
/**
|
||||
* 添加
|
||||
*/
|
||||
@RequiresPermissions("inconformityItem:add")
|
||||
@AutoLog(value = "未符合项-添加")
|
||||
@ApiOperation(value="未符合项-添加", notes="未符合项-添加")
|
||||
@PostMapping(value = "/add")
|
||||
@@ -72,6 +75,7 @@ public class LawsEvaluationNotMetController extends JeroController<LawsEvaluatio
|
||||
/**
|
||||
* 编辑
|
||||
*/
|
||||
@RequiresPermissions("inconformityItem:edit")
|
||||
@AutoLog(value = "未符合项-编辑")
|
||||
@ApiOperation(value="未符合项-编辑", notes="未符合项-编辑")
|
||||
@PostMapping(value = "/edit")
|
||||
@@ -85,6 +89,7 @@ public class LawsEvaluationNotMetController extends JeroController<LawsEvaluatio
|
||||
/**
|
||||
* 通过id查询
|
||||
*/
|
||||
@RequiresPermissions("inconformityItem:view")
|
||||
@AutoLog(value = "未符合项-通过id查询")
|
||||
@ApiOperation(value="未符合项-通过id查询", notes="未符合项-通过id查询")
|
||||
@GetMapping(value = "/queryById")
|
||||
@@ -99,6 +104,7 @@ public class LawsEvaluationNotMetController extends JeroController<LawsEvaluatio
|
||||
/**
|
||||
* 批量关闭
|
||||
*/
|
||||
@RequiresPermissions("inconformityItem:batchClose")
|
||||
@AutoLog(value = "未符合项-批量关闭")
|
||||
@ApiOperation(value="未符合项-批量关闭", notes="项目库-批量关闭")
|
||||
@PostMapping(value = "/batchClose")
|
||||
@@ -142,6 +148,7 @@ public class LawsEvaluationNotMetController extends JeroController<LawsEvaluatio
|
||||
/**
|
||||
* 导出excel
|
||||
*/
|
||||
@RequiresPermissions("inconformityItem:export")
|
||||
@GetMapping(value = "/exportXls")
|
||||
public ModelAndView exportXls(HttpServletRequest request, LawsEvaluationNotMet lawsEvaluationNotMet) {
|
||||
return super.exportXls(request, lawsEvaluationNotMet, LawsEvaluationNotMet.class, "未符合项");
|
||||
|
||||
Reference in New Issue
Block a user