拦截farm请求和user请求；用户详情接口增加preAuth注解

guoshilong

2022-10-18 6b6725aac343f6decf4e475ff8b03f5b474e5759

拦截farm请求和user请求；用户详情接口增加preAuth注解

 src/main/java/org/springblade/common/config/BladeConfiguration.java

@@ -58,10 +58,10 @@
        secureRegistry.excludePathPatterns("/farmPlant/**");
        secureRegistry.excludePathPatterns("/task/task/**");
        secureRegistry.excludePathPatterns("/recovery/**");
        secureRegistry.excludePathPatterns("/farm/**");
//        secureRegistry.excludePathPatterns("/farm/**");
        secureRegistry.excludePathPatterns("/sale/sale/**");
        secureRegistry.excludePathPatterns("/farmingRecord/**");
        secureRegistry.excludePathPatterns("/blade-user/**");
//        secureRegistry.excludePathPatterns("/blade-user/**");
        secureRegistry.excludePathPatterns("/soldrecord/soldrecord/**");
        secureRegistry.excludePathPatterns("/stockfactory/stockfactory/**");
        secureRegistry.excludePathPatterns("/soldr/soldr/**");

 src/main/java/org/springblade/modules/system/controller/UserController.java

@@ -83,7 +83,7 @@
    @ApiOperationSupport(order = 1)
    @ApiOperation(value = "查看详情", notes = "传入id")
    @GetMapping("/detail")
//    @PreAuth(RoleConstant.HAS_ROLE_ADMIN)
    @PreAuth("hasAnyRole('administrator,admin,user')")
    public R<UserVO> detail(User user) {
        User detail = userService.getOne(Condition.getQueryWrapper(user));
        return R.data(UserWrapper.build().entityVO(detail));