|
@@ -40,7 +40,10 @@ public class UserController {
|
|
|
@ApiImplicitParams({
|
|
|
@ApiImplicitParam(name = "id", value = "用id", required = true, dataType = "Integer")
|
|
|
})
|
|
|
- public RespR user(@PathVariable Integer id) {
|
|
|
+ public RespR user(@PathVariable Integer id,User user) {
|
|
|
+ if(!AuthenticationInterceptor.AUTH_ADMIN.equals(user.getRoleId()) && !(user.getId().compareTo(id)==0)){
|
|
|
+ return new RespR<>(false,"无权限");
|
|
|
+ }
|
|
|
return new RespR<>(userService.selectUserById(id));
|
|
|
}
|
|
|
|
|
@@ -52,7 +55,7 @@ public class UserController {
|
|
|
*/
|
|
|
@DeleteMapping("/{id}")
|
|
|
@ApiOperation(value="根据用户名id删除用户信息", notes="根据用户名id删除用户信息")
|
|
|
- @LoginRequired
|
|
|
+ @LoginRequired(role = AuthenticationInterceptor.AUTH_ADMIN)
|
|
|
public RespR userDel(@PathVariable Integer id) {
|
|
|
User sysUser = userService.getById(id);
|
|
|
return new RespR<>(userService.deleteUserById(sysUser));
|
|
@@ -66,7 +69,7 @@ public class UserController {
|
|
|
*/
|
|
|
@PostMapping
|
|
|
@ApiOperation(value="新增用户详细信息", notes="新增用户详细信息")
|
|
|
- @LoginRequired
|
|
|
+ @LoginRequired(role = AuthenticationInterceptor.AUTH_ADMIN)
|
|
|
public RespR user(@RequestBody User user) {
|
|
|
user.setPassword(MD5Util.encrypt(user.getPassword()));
|
|
|
User user1 = userService.selectUserByUserName(user.getUserName());
|
|
@@ -84,7 +87,7 @@ public class UserController {
|
|
|
*/
|
|
|
@PostMapping("/updateUser")
|
|
|
@ApiOperation(value="更新用户信息", notes="更新用户信息")
|
|
|
- @LoginRequired
|
|
|
+ @LoginRequired(role = AuthenticationInterceptor.AUTH_ADMIN)
|
|
|
public RespR updateUser(@RequestBody User user) {
|
|
|
if(user.getPassword()!=null){
|
|
|
user.setPassword(MD5Util.encrypt(user.getPassword()));
|
|
@@ -113,7 +116,7 @@ public class UserController {
|
|
|
*/
|
|
|
@PutMapping("/restPassword")
|
|
|
@ApiOperation(value="重置密码", notes="重置密码")
|
|
|
- @LoginRequired
|
|
|
+ @LoginRequired(role = AuthenticationInterceptor.AUTH_ADMIN)
|
|
|
public RespR updateUserInfoPassWord(@RequestBody User user) {
|
|
|
user.setPassword(MD5Util.encrypt(user.getPassword()));
|
|
|
return userService.restPassword(user);
|
|
@@ -127,7 +130,7 @@ public class UserController {
|
|
|
*/
|
|
|
@PutMapping("/lock")
|
|
|
@ApiOperation(value="修改锁定状态", notes="修改锁定状态")
|
|
|
- @LoginRequired
|
|
|
+ @LoginRequired(role = AuthenticationInterceptor.AUTH_ADMIN)
|
|
|
public RespR updateLock(@RequestBody User user) {
|
|
|
return userService.updateLock(user);
|
|
|
}
|