文件分类新增权限控制

src/main/java/com/backendsys/modules/upload/controller/SysFileCategoryController.java

@@ -33,6 +33,7 @@ public class SysFileCategoryController {
 //    }
 
     @Operation(summary = "获取文件分类列表 (我的)")
+    @PreAuthorize("@sr.hasPermission('1.1.2')")
     @GetMapping("/api/upload/getUploadFileCategoryList")
     public Result getUploadFileCategoryList(@Validated SysFileCategory sysFileCategory) {
         sysFileCategory.setUser_id(SecurityUtil.getUserId());
@@ -40,6 +41,7 @@ public class SysFileCategoryController {
     }
 
     @Operation(summary = "创建文件分类")
+    @PreAuthorize("@sr.hasPermission('1.1.3')")
     @PostMapping("/api/upload/createFileCategory")
     public Result createFileCategory(@Validated(SysFileCategory.Create.class) @RequestBody SysFileCategory sysFileCategory) {
         sysFileCategory.setUser_id(SecurityUtil.getUserId());
@@ -47,19 +49,23 @@ public class SysFileCategoryController {
     }
 
     @Operation(summary = "编辑文件分类")
+    @PreAuthorize("@sr.hasPermission('1.1.4')")
     @PutMapping("/api/upload/updateFileCategory")
     public Result updateFileCategory(@Validated(SysFileCategory.Update.class) @RequestBody SysFileCategory sysFileCategory) {
         sysFileCategory.setUser_id(SecurityUtil.getUserId());
         return Result.success().put("data", sysFileCategoryService.updateFileCategory(sysFileCategory));
     }
 
+    // 包含 增、删、改 权限
     @Operation(summary = "编辑文件分类(批量)")
+//    @PreAuthorize("@sr.hasPermission('1.1.4')")
     @PutMapping("/api/upload/updateFileCategoryBatch")
     public Result updateFileCategoryBatch(@Validated(SysFileCategory.UpdateBatch.class) @RequestBody SysFileCategory sysFileCategory) {
         return Result.success().put("data", sysFileCategoryService.updateFileCategoryBatch(sysFileCategory.getList()));
     }
 
     @Operation(summary = "删除文件分类")
+    @PreAuthorize("@sr.hasPermission('1.1.6')")
     @DeleteMapping("/api/upload/deleteFileCategory")
     public Result deleteFileCategory(@Validated(SysFileCategory.Delete.class) @RequestBody SysFileCategory sysFileCategory) {
         sysFileCategory.setUser_id(SecurityUtil.getUserId());

src/main/java/com/backendsys/modules/upload/service/impl/SysFileCategoryServiceImpl.java

@@ -9,6 +9,7 @@ import com.backendsys.modules.upload.dao.SysFileDao;
 import com.backendsys.modules.upload.entity.SysFile;
 import com.backendsys.modules.upload.entity.SysFileCategory;
 import com.backendsys.modules.upload.service.SysFileCategoryService;
+import com.backendsys.utils.response.ResultEnum;
 import com.baomidou.mybatisplus.core.conditions.query.LambdaQueryWrapper;
 import org.springframework.beans.factory.annotation.Autowired;
 import org.springframework.stereotype.Service;
@@ -21,6 +22,9 @@ import java.util.stream.Collectors;
 @Service
 public class SysFileCategoryServiceImpl implements SysFileCategoryService {
 
+    @Autowired
+    private SecurityUtil securityUtil;
+
     @Autowired
     private SysFileDao sysFileDao;
     @Autowired
@@ -141,10 +145,13 @@ public class SysFileCategoryServiceImpl implements SysFileCategoryService {
                 }
             }
 
-            // [DB] 批量新增
             if (!insertListEntity.isEmpty()) {
-                System.out.println("insertListEntity: " + insertListEntity);
+
+                // 判断权限
+                if (securityUtil.hasPermission("1.1.3")) new CustException(ResultEnum.AUTH_ROLE_ERROR.getMessage());
+                // [DB] 批量新增
                 sysFileCategoryDao.insertBatch(insertListEntity);
+
                 StringBuilder insertIdSetStr = new StringBuilder();
                 insertListEntity.stream().forEach(it -> {
                     if (it.getId() != null) {
@@ -178,17 +185,24 @@ public class SysFileCategoryServiceImpl implements SysFileCategoryService {
                 }
             }
 
+            // 判断权限
+            if (securityUtil.hasPermission("1.1.6")) new CustException(ResultEnum.AUTH_ROLE_ERROR.getMessage());
             // [DB] 批量删除
             sysFileCategoryDao.deleteBatchIds(deleteIds);
+
             String deleteIdsStr = deleteIds.stream().map(String::valueOf).collect(Collectors.joining(", "));
             message += "删除了 Id: " + deleteIdsStr + ", ";
         }
 
 
-        // [DB] 批量更新
+
         if (sysFileCategoryList.size() > 0) {
-            System.out.println("updateByIdBatch: " + sysFileCategoryList);
+
+            // 判断权限
+            if (securityUtil.hasPermission("1.1.4")) new CustException(ResultEnum.AUTH_ROLE_ERROR.getMessage());
+            // [DB] 批量更新
             sysFileCategoryDao.updateByIdBatch(sysFileCategoryList);
+
             String updateIdSetStr = updateIdSetNoNull.stream().map(String::valueOf).collect(Collectors.joining(", "));
             message += "更新了 Id: " + updateIdSetStr;
         }