|
@@ -9,12 +9,12 @@ import com.backendsys.modules.system.service.SysUserV2Service;
|
|
|
import io.swagger.v3.oas.annotations.Operation;
|
|
|
import io.swagger.v3.oas.annotations.Parameter;
|
|
|
import io.swagger.v3.oas.annotations.tags.Tag;
|
|
|
+import jakarta.validation.constraints.NotEmpty;
|
|
|
import org.springframework.beans.factory.annotation.Autowired;
|
|
|
import org.springframework.security.access.prepost.PreAuthorize;
|
|
|
import org.springframework.validation.annotation.Validated;
|
|
|
import org.springframework.web.bind.annotation.*;
|
|
|
|
|
|
-
|
|
|
@Validated
|
|
|
@RestController
|
|
|
@Tag(name = "系统用户")
|
|
@@ -36,8 +36,10 @@ public class SysUserV2Controller {
|
|
|
// 查询自身的用户信息 (不传参数)
|
|
|
user_id = (user_id == null) ? SecurityUtil.getUserId() : user_id;
|
|
|
|
|
|
- // 查询他人的用户信息,需要具备权限 (非管理员,非当前用户,不具备权限)
|
|
|
- if (!SecurityUtil.isSuper() && user_id != SecurityUtil.getUserId() && !SecurityUtil.hasPermission("3.2.1.2")) {
|
|
|
+ // 查询他人的用户信息
|
|
|
+ // - 查询自己 (无需权限)
|
|
|
+ // - 查询他人 (需要权限或超级管理员)
|
|
|
+ if (user_id != SecurityUtil.getUserId() && !SecurityUtil.hasPermission("3.2.1.2") && !SecurityUtil.isSuper()) {
|
|
|
throw new CustException(SecurityEnum.NOAUTH);
|
|
|
}
|
|
|
|
|
@@ -46,17 +48,23 @@ public class SysUserV2Controller {
|
|
|
|
|
|
|
|
|
@Operation(summary = "获得系统用户权限")
|
|
|
-// @PreAuthorize("@sr.hasPermission('3.2.1')")
|
|
|
+ @PreAuthorize("@sr.hasPermission('3.4')")
|
|
|
@GetMapping("/api/v2/system/user/getUserPermission")
|
|
|
- public Result getUserPermission(@Validated(SysUserInfo.Primarys.class) @ModelAttribute SysUserInfo userInfo) {
|
|
|
-
|
|
|
- // GetMapping 识别不了 @Validated ?
|
|
|
+// public Result getUserPermission(@Validated(SysUserInfo.Primarys.class) SysUserInfo userInfo) {
|
|
|
+// public Result getUserPermission(@NotEmpty(message = "user_id 不能为空") String user_id) {
|
|
|
+ public Result getUserPermission(@Parameter(description = "用户ID") Long user_id) {
|
|
|
|
|
|
- // public Result getUserPermission(@NotBlank(message = "user_id 不能为空") String user_id) {
|
|
|
+ // 查询自身的用户信息 (不传参数)
|
|
|
+ user_id = (user_id == null) ? SecurityUtil.getUserId() : user_id;
|
|
|
|
|
|
- System.out.println(userInfo);
|
|
|
+ // 查询他人的用户信息
|
|
|
+ // - 查询自己 (无需权限)
|
|
|
+ // - 查询他人 (需要权限或超级管理员)
|
|
|
+ if (user_id != SecurityUtil.getUserId() && !SecurityUtil.hasPermission("3.4") && !SecurityUtil.isSuper()) {
|
|
|
+ throw new CustException(SecurityEnum.NOAUTH);
|
|
|
+ }
|
|
|
|
|
|
- return Result.success().put("data", null);
|
|
|
+ return Result.success().put("data", sysUserV2Service.selectUserModule(user_id));
|
|
|
}
|
|
|
|
|
|
}
|