From a60bf22b002ccceacbef54aeae0493519ab144d1 Mon Sep 17 00:00:00 2001 From: linfso Date: Fri, 12 Jul 2024 21:34:57 +0800 Subject: [PATCH] md --- .../web/Oms2cCustomerAddressController.java | 51 ++++++++++++++++--- 1 file changed, 43 insertions(+), 8 deletions(-) diff --git a/emis-oms-biz-web/src/main/java/com/xdadan/erp/oms/web/Oms2cCustomerAddressController.java b/emis-oms-biz-web/src/main/java/com/xdadan/erp/oms/web/Oms2cCustomerAddressController.java index 89caf9b..f5277da 100644 --- a/emis-oms-biz-web/src/main/java/com/xdadan/erp/oms/web/Oms2cCustomerAddressController.java +++ b/emis-oms-biz-web/src/main/java/com/xdadan/erp/oms/web/Oms2cCustomerAddressController.java @@ -48,7 +48,7 @@ public class Oms2cCustomerAddressController extends BaseController { startPage(); // 只能查看自己的地址信息 - emisCustomerAddress.setUserId(getLoginUser().getUser().getId()); +// emisCustomerAddress.setUserId(getLoginUser().getUser().getId()); emisCustomerAddress.setCustomerCode(getLoginUser().getUser().getCustomerCode()); List list = emisCustomerAddressService.selectEmisCustomerAddressList(emisCustomerAddress); return getDataTable(list); @@ -61,7 +61,7 @@ public class Oms2cCustomerAddressController extends BaseController { // 需要限制，除总部外，只能查看站点自有数据 startPage(); - emisCustomerAddress.setUserId(getLoginUser().getUser().getId()); +// emisCustomerAddress.setUserId(getLoginUser().getUser().getId()); emisCustomerAddress.setCustomerCode(getLoginUser().getUser().getCustomerCode()); List list = emisCustomerAddressService.selectEmisCustomerAddressList(emisCustomerAddress); return getDataTable(list); @@ -71,23 +71,36 @@ public class Oms2cCustomerAddressController extends BaseController @RequestMapping("/getAddressById") public AjaxResult getAddressById(@RequestParam("id") Long id) { - return AjaxResult.success(emisCustomerAddressService.selectEmisCustomerAddressById(id)); + EmisCustomerAddress emisCustomerAddress=emisCustomerAddressService.selectEmisCustomerAddressById(id); + if(!getLoginUser().getUser().getCustomerCode().equals(emisCustomerAddress.getCustomerCode())){ + return AjaxResult.error("非法操作"); + } + + return AjaxResult.success(emisCustomerAddress); } @RequestMapping("/setDefaultAddressById") public AjaxResult setDefaultAddressById(@RequestParam("id") Long id,String defaultFlag) { + EmisCustomerAddress emisCustomerAddress=emisCustomerAddressService.selectEmisCustomerAddressById(id); + if(!getLoginUser().getUser().getCustomerCode().equals(emisCustomerAddress.getCustomerCode())){ + return AjaxResult.error("非法操作"); + } + return toAjax(emisCustomerAddressService.setDefaultAddressById(id,defaultFlag)); } @RequestMapping("/deleteAddressById") public AjaxResult deleteAddressById(@RequestParam("id") Long id) { + EmisCustomerAddress emisCustomerAddress=emisCustomerAddressService.selectEmisCustomerAddressById(id); + if(!getLoginUser().getUser().getCustomerCode().equals(emisCustomerAddress.getCustomerCode())){ + return AjaxResult.error("非法操作"); + } + return toAjax(emisCustomerAddressService.deleteEmisCustomerAddressById(id)); } - - /** * 获取客户收寄件地址详细信息 */ @@ -95,13 +108,18 @@ public class Oms2cCustomerAddressController extends BaseController @GetMapping(value = "/{id}") public AjaxResult getInfo(@PathVariable("id") Long id) { + EmisCustomerAddress emisCustomerAddress=emisCustomerAddressService.selectEmisCustomerAddressById(id); + if(!getLoginUser().getUser().getCustomerCode().equals(emisCustomerAddress.getCustomerCode())){ + return AjaxResult.error("非法操作"); + } + return AjaxResult.success(emisCustomerAddressService.selectEmisCustomerAddressById(id)); } /** * 新增客户收寄件地址 */ - @PreAuthorize("@ss.hasPermi('emis:emisCustomerAddress:add')") +// @PreAuthorize("@ss.hasPermi('emis:emisCustomerAddress:add')") @Log(title = "客户收寄件地址", businessType = BusinessType.INSERT) @PostMapping public AjaxResult add(@RequestBody EmisCustomerAddress emisCustomerAddress) @@ -124,28 +142,45 @@ public class Oms2cCustomerAddressController extends BaseController @PostMapping("/editAddress") public AjaxResult editAddress(@RequestBody EmisCustomerAddress emisCustomerAddress) { + EmisCustomerAddress old=emisCustomerAddressService.selectEmisCustomerAddressById(emisCustomerAddress.getId()); + if(!getLoginUser().getUser().getCustomerCode().equals(old.getCustomerCode())){ + return AjaxResult.error("非法操作"); + } + return toAjax(emisCustomerAddressService.updateEmisCustomerAddress(emisCustomerAddress)); } /** * 修改客户收寄件地址 */ - @PreAuthorize("@ss.hasPermi('emis:emisCustomerAddress:edit')") +// @PreAuthorize("@ss.hasPermi('emis:emisCustomerAddress:edit')") @Log(title = "客户收寄件地址", businessType = BusinessType.UPDATE) @PutMapping public AjaxResult edit(@RequestBody EmisCustomerAddress emisCustomerAddress) { + EmisCustomerAddress old=emisCustomerAddressService.selectEmisCustomerAddressById(emisCustomerAddress.getId()); + if(!getLoginUser().getUser().getCustomerCode().equals(old.getCustomerCode())){ + return AjaxResult.error("非法操作"); + } + return toAjax(emisCustomerAddressService.updateEmisCustomerAddress(emisCustomerAddress)); } /** * 删除客户收寄件地址 */ - @PreAuthorize("@ss.hasPermi('emis:emisCustomerAddress:remove')") +// @PreAuthorize("@ss.hasPermi('emis:emisCustomerAddress:remove')") @Log(title = "客户收寄件地址", businessType = BusinessType.DELETE) @DeleteMapping("/{ids}") public AjaxResult remove(@PathVariable Long[] ids) { + for (Long id:ids + ) { + EmisCustomerAddress old=emisCustomerAddressService.selectEmisCustomerAddressById(id); + if(!getLoginUser().getUser().getCustomerCode().equals(old.getCustomerCode())){ + return AjaxResult.error("非法操作"); + } + } return toAjax(emisCustomerAddressService.deleteEmisCustomerAddressByIds(ids)); } }