|
@@ -1,20 +1,15 @@
|
|
|
package com.backendsys.modules.system.controller;
|
|
|
|
|
|
-import cn.hutool.core.collection.CollUtil;
|
|
|
import cn.hutool.core.util.ObjectUtil;
|
|
|
-import cn.hutool.core.util.ClassUtil;
|
|
|
-import com.backendsys.aspect.QueryNullCheck;
|
|
|
import com.backendsys.exception.CustException;
|
|
|
import com.backendsys.modules.common.config.security.enums.SecurityEnum;
|
|
|
import com.backendsys.modules.common.config.security.utils.SecurityUtil;
|
|
|
import com.backendsys.modules.common.utils.Result;
|
|
|
import com.backendsys.modules.system.entity.SysUser.SysUserDTO;
|
|
|
import com.backendsys.modules.system.service.SysUserV2Service;
|
|
|
-import com.backendsys.service.System.SysUserService;
|
|
|
import io.swagger.v3.oas.annotations.Operation;
|
|
|
import io.swagger.v3.oas.annotations.Parameter;
|
|
|
import io.swagger.v3.oas.annotations.tags.Tag;
|
|
|
-import jakarta.servlet.http.HttpServletRequest;
|
|
|
import org.springframework.beans.factory.annotation.Autowired;
|
|
|
import org.springframework.security.access.prepost.PreAuthorize;
|
|
|
import org.springframework.validation.annotation.Validated;
|
|
@@ -64,7 +59,7 @@ public class SysUserV2Controller {
|
|
|
// 查询他人的用户信息
|
|
|
// - 查询自己 (无需权限)
|
|
|
// - 查询他人 (需要权限或超级管理员)
|
|
|
- if (user_id != SecurityUtil.getUserId() && !SecurityUtil.hasPermission("3.2.1.2") && !SecurityUtil.isSuper()) {
|
|
|
+ if (!user_id.equals(SecurityUtil.getUserId()) && !SecurityUtil.hasPermission("3.2.1.2") && !SecurityUtil.isSuper()) {
|
|
|
throw new CustException(SecurityEnum.NOAUTH);
|
|
|
}
|
|
|
return Result.success().put("data", sysUserV2Service.selectUserInfo(user_id));
|
|
@@ -86,7 +81,7 @@ public class SysUserV2Controller {
|
|
|
// 查询他人的用户信息
|
|
|
// - 查询自己 (无需权限)
|
|
|
// - 查询他人 (需要子权限或超级管理员)
|
|
|
- if (user_id != SecurityUtil.getUserId() && !SecurityUtil.hasPermission("3.4.1.2") && !SecurityUtil.isSuper()) {
|
|
|
+ if (!user_id.equals(SecurityUtil.getUserId()) && !SecurityUtil.hasPermission("3.4.1.2") && !SecurityUtil.isSuper()) {
|
|
|
throw new CustException(SecurityEnum.NOAUTH);
|
|
|
}
|
|
|
return Result.success().put("data", sysUserV2Service.selectUserModule(user_id));
|
|
@@ -121,7 +116,7 @@ public class SysUserV2Controller {
|
|
|
// 编辑他人的用户信息
|
|
|
// - 编辑自己 (无需权限)
|
|
|
// - 编辑他人 (需要子权限或超级管理员)
|
|
|
- if (user_id != SecurityUtil.getUserId() && !SecurityUtil.hasPermission("3.2.3.2") && !SecurityUtil.isSuper()) {
|
|
|
+ if (!user_id.equals(SecurityUtil.getUserId()) && !SecurityUtil.hasPermission("3.2.3.2") && !SecurityUtil.isSuper()) {
|
|
|
throw new CustException(SecurityEnum.NOAUTH);
|
|
|
}
|
|
|
|
|
@@ -152,7 +147,7 @@ public class SysUserV2Controller {
|
|
|
// 编辑他人的用户信息
|
|
|
// - 编辑自己 (无需权限)
|
|
|
// - 编辑他人 (需要子权限或超级管理员)
|
|
|
- if (user_id != SecurityUtil.getUserId() && !SecurityUtil.hasPermission("3.2.3.2") && !SecurityUtil.isSuper()) {
|
|
|
+ if (!user_id.equals(SecurityUtil.getUserId()) && !SecurityUtil.hasPermission("3.2.3.2") && !SecurityUtil.isSuper()) {
|
|
|
throw new CustException(SecurityEnum.NOAUTH);
|
|
|
}
|
|
|
|
|
@@ -172,4 +167,17 @@ public class SysUserV2Controller {
|
|
|
return Result.success().put("data", sysUserV2Service.deleteUser(user_ids));
|
|
|
}
|
|
|
|
|
|
+
|
|
|
+ @Operation(summary = "踢出系统用户")
|
|
|
+ @PreAuthorize("@ss.hasPermi('3.2.7')")
|
|
|
+ @PostMapping("/api/v2/system/user/kickUser")
|
|
|
+ public Result kickUser(@Validated(SysUserDTO.Kick.class) @RequestBody SysUserDTO sysUserDTO) {
|
|
|
+
|
|
|
+ Long user_id = sysUserDTO.getUser_id();
|
|
|
+ if (user_id.equals(1L)) throw new CustException("不能踢出超管账号");
|
|
|
+ if (user_id.equals(SecurityUtil.getUserId())) throw new CustException("不能踢出自己的账号");
|
|
|
+
|
|
|
+ return Result.success().put("data", sysUserV2Service.kickUser(user_id));
|
|
|
+ }
|
|
|
+
|
|
|
}
|