ZQ/laws-sinotruk-server
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix 80377 【垂直越权】未符合项详情所有接口未做垂直越权

Browse Source
This commit is contained in:
lijiarao
2024-01-31 20:33:28 +08:00
parent 27b3ba1fff
commit a5a945732b
1 changed files with 7 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
laws-modules/src/main/java/com/jero/modules/projectLibrary/controller/LawsEvaluationNotMetController.java
+7
View File
@@ -15,6 +15,7 @@ import com.jero.modules.system.vo.IdsMapBody;
import lombok.extern.slf4j.Slf4j; import lombok.extern.slf4j.Slf4j;
import com.jero.common.system.base.controller.JeroController; import com.jero.common.system.base.controller.JeroController;
import org.apache.commons.lang3.StringUtils; import org.apache.commons.lang3.StringUtils;
import org.apache.shiro.authz.annotation.RequiresPermissions;
import org.springframework.beans.factory.annotation.Autowired; import org.springframework.beans.factory.annotation.Autowired;
import org.springframework.validation.annotation.Validated; import org.springframework.validation.annotation.Validated;
import org.springframework.web.bind.annotation.*; import org.springframework.web.bind.annotation.*;
@@ -47,6 +48,7 @@ public class LawsEvaluationNotMetController extends JeroController<LawsEvaluatio
/** /**
* 分页列表查询 * 分页列表查询
*/ */
@RequiresPermissions("inconformityItem:search")
@AutoLog(value = "未符合项-分页列表查询") @AutoLog(value = "未符合项-分页列表查询")
@ApiOperation(value="未符合项-分页列表查询", notes="未符合项-分页列表查询") @ApiOperation(value="未符合项-分页列表查询", notes="未符合项-分页列表查询")
@GetMapping(value = "/page") @GetMapping(value = "/page")
@@ -61,6 +63,7 @@ public class LawsEvaluationNotMetController extends JeroController<LawsEvaluatio
/** /**
* 添加 * 添加
*/ */
@RequiresPermissions("inconformityItem:add")
@AutoLog(value = "未符合项-添加") @AutoLog(value = "未符合项-添加")
@ApiOperation(value="未符合项-添加", notes="未符合项-添加") @ApiOperation(value="未符合项-添加", notes="未符合项-添加")
@PostMapping(value = "/add") @PostMapping(value = "/add")
@@ -72,6 +75,7 @@ public class LawsEvaluationNotMetController extends JeroController<LawsEvaluatio
/** /**
* 编辑 * 编辑
*/ */
@RequiresPermissions("inconformityItem:edit")
@AutoLog(value = "未符合项-编辑") @AutoLog(value = "未符合项-编辑")
@ApiOperation(value="未符合项-编辑", notes="未符合项-编辑") @ApiOperation(value="未符合项-编辑", notes="未符合项-编辑")
@PostMapping(value = "/edit") @PostMapping(value = "/edit")
@@ -85,6 +89,7 @@ public class LawsEvaluationNotMetController extends JeroController<LawsEvaluatio
/** /**
* 通过id查询 * 通过id查询
*/ */
@RequiresPermissions("inconformityItem:view")
@AutoLog(value = "未符合项-通过id查询") @AutoLog(value = "未符合项-通过id查询")
@ApiOperation(value="未符合项-通过id查询", notes="未符合项-通过id查询") @ApiOperation(value="未符合项-通过id查询", notes="未符合项-通过id查询")
@GetMapping(value = "/queryById") @GetMapping(value = "/queryById")
@@ -99,6 +104,7 @@ public class LawsEvaluationNotMetController extends JeroController<LawsEvaluatio
/** /**
* 批量关闭 * 批量关闭
*/ */
@RequiresPermissions("inconformityItem:batchClose")
@AutoLog(value = "未符合项-批量关闭") @AutoLog(value = "未符合项-批量关闭")
@ApiOperation(value="未符合项-批量关闭", notes="项目库-批量关闭") @ApiOperation(value="未符合项-批量关闭", notes="项目库-批量关闭")
@PostMapping(value = "/batchClose") @PostMapping(value = "/batchClose")
@@ -142,6 +148,7 @@ public class LawsEvaluationNotMetController extends JeroController<LawsEvaluatio
/** /**
* 导出excel * 导出excel
*/ */
@RequiresPermissions("inconformityItem:export")
@GetMapping(value = "/exportXls") @GetMapping(value = "/exportXls")
public ModelAndView exportXls(HttpServletRequest request, LawsEvaluationNotMet lawsEvaluationNotMet) { public ModelAndView exportXls(HttpServletRequest request, LawsEvaluationNotMet lawsEvaluationNotMet) {
return super.exportXls(request, lawsEvaluationNotMet, LawsEvaluationNotMet.class, "未符合项"); return super.exportXls(request, lawsEvaluationNotMet, LawsEvaluationNotMet.class, "未符合项");