From 6b6725aac343f6decf4e475ff8b03f5b474e5759 Mon Sep 17 00:00:00 2001
From: guoshilong <123456>
Date: Tue, 18 Oct 2022 10:49:37 +0800
Subject: [PATCH] 拦截farm请求和user请求；用户详情接口增加preAuth注解
---
src/main/java/org/springblade/common/config/BladeConfiguration.java | 4 ++--
src/main/java/org/springblade/modules/system/controller/UserController.java | 2 +-
2 files changed, 3 insertions(+), 3 deletions(-)
diff --git a/src/main/java/org/springblade/common/config/BladeConfiguration.java b/src/main/java/org/springblade/common/config/BladeConfiguration.java
index 5609cfe..6f08721 100644
--- a/src/main/java/org/springblade/common/config/BladeConfiguration.java
+++ b/src/main/java/org/springblade/common/config/BladeConfiguration.java
@@ -58,10 +58,10 @@
secureRegistry.excludePathPatterns("/farmPlant/**");
secureRegistry.excludePathPatterns("/task/task/**");
secureRegistry.excludePathPatterns("/recovery/**");
- secureRegistry.excludePathPatterns("/farm/**");
+// secureRegistry.excludePathPatterns("/farm/**");
secureRegistry.excludePathPatterns("/sale/sale/**");
secureRegistry.excludePathPatterns("/farmingRecord/**");
- secureRegistry.excludePathPatterns("/blade-user/**");
+// secureRegistry.excludePathPatterns("/blade-user/**");
secureRegistry.excludePathPatterns("/soldrecord/soldrecord/**");
secureRegistry.excludePathPatterns("/stockfactory/stockfactory/**");
secureRegistry.excludePathPatterns("/soldr/soldr/**");
diff --git a/src/main/java/org/springblade/modules/system/controller/UserController.java b/src/main/java/org/springblade/modules/system/controller/UserController.java
index 901fd37..705500a 100644
--- a/src/main/java/org/springblade/modules/system/controller/UserController.java
+++ b/src/main/java/org/springblade/modules/system/controller/UserController.java
@@ -83,7 +83,7 @@
@ApiOperationSupport(order = 1)
@ApiOperation(value = "查看详情", notes = "传入id")
@GetMapping("/detail")
-// @PreAuth(RoleConstant.HAS_ROLE_ADMIN)
+ @PreAuth("hasAnyRole('administrator,admin,user')")
public R<UserVO> detail(User user) {
User detail = userService.getOne(Condition.getQueryWrapper(user));
return R.data(UserWrapper.build().entityVO(detail));
--
Gitblit v1.9.3