Browse Source

版本切换

anderx 1 year ago
parent
commit
77c203e959

+ 14 - 0
src/main/java/com/goafanti/standard/controller/StandardApiController.java

@@ -1,11 +1,13 @@
 package com.goafanti.standard.controller;
 
 import com.goafanti.common.bo.Result;
+import com.goafanti.common.constant.AFTConstants;
 import com.goafanti.common.constant.ErrorConstants;
 import com.goafanti.common.controller.CertifyApiController;
 import com.goafanti.common.enums.AttachmentType;
 import com.goafanti.common.model.StandardDocument;
 import com.goafanti.core.mybatis.page.Pagination;
+import com.goafanti.core.shiro.token.TokenManager;
 import com.goafanti.standard.bo.InputStandardList;
 import com.goafanti.standard.bo.OutStandardDocument;
 import com.goafanti.standard.service.StandardService;
@@ -46,6 +48,10 @@ public class StandardApiController extends CertifyApiController {
     @RequestMapping(value = "/add", method = RequestMethod.POST)
     public Result add(StandardDocument in) {
         Result res = res();
+        if (!TokenManager.hasRole(AFTConstants.SUPERADMIN)) {
+            res.error(buildError("操作权限不正确。"));
+            return res;
+        }
         return res.data(standardService.add(in));
     }
 
@@ -55,6 +61,10 @@ public class StandardApiController extends CertifyApiController {
     @RequestMapping(value = "/delete", method = RequestMethod.POST)
     public Result delete(StandardDocument in) {
         Result res = res();
+        if (!TokenManager.hasRole(AFTConstants.SUPERADMIN)) {
+            res.error(buildError("操作权限不正确。"));
+            return res;
+        }
         return res.data(standardService.delete(in));
     }
 
@@ -64,6 +74,10 @@ public class StandardApiController extends CertifyApiController {
     @RequestMapping(value = "/update", method = RequestMethod.POST)
     public Result update(StandardDocument in) {
         Result res = res();
+        if (!TokenManager.hasRole(AFTConstants.SUPERADMIN)) {
+            res.error(buildError("操作权限不正确。"));
+            return res;
+        }
         return res.data(standardService.update(in));
     }