From 42d9af6eb1353d2f7b72b98fce8ab28be8c5bf31 Mon Sep 17 00:00:00 2001 From: "1437892690@qq.com" <1437892690@qq.com> Date: Wed, 7 May 2025 17:59:39 +0800 Subject: [PATCH] =?UTF-8?q?[=E5=8A=9F=E8=83=BD]=20=E5=90=8E=E7=AB=AF-?= =?UTF-8?q?=E5=B7=A5=E5=8D=95=E8=AF=A6=E6=83=85-=E7=BC=96=E8=BE=91?= =?UTF-8?q?=E8=A1=A8=E5=8D=95=E6=8C=89=E9=92=AE=E6=9D=83=E9=99=90=E8=B0=83?= =?UTF-8?q?=E6=95=B4?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit 关联 #[1416029765337088]后端-工单详情-编辑表单按钮权限调整 http://192.168.0.96:8090/demo/rdm.html#/task-detail/939050947543040/939050947543050/1416029765337088 --- .../api/processtask/UpdateProcessTaskFormApi.java | 12 ++++++++++-- 1 file changed, 10 insertions(+), 2 deletions(-) diff --git a/src/main/java/neatlogic/module/process/api/processtask/UpdateProcessTaskFormApi.java b/src/main/java/neatlogic/module/process/api/processtask/UpdateProcessTaskFormApi.java index 7cf4ab0b1..7a06886f6 100644 --- a/src/main/java/neatlogic/module/process/api/processtask/UpdateProcessTaskFormApi.java +++ b/src/main/java/neatlogic/module/process/api/processtask/UpdateProcessTaskFormApi.java @@ -19,15 +19,17 @@ package neatlogic.module.process.api.processtask; import com.alibaba.fastjson.JSONObject; import neatlogic.framework.asynchronization.threadlocal.UserContext; -import neatlogic.framework.auth.core.AuthAction; +import neatlogic.framework.auth.core.AuthActionChecker; import neatlogic.framework.common.constvalue.ApiParamType; import neatlogic.framework.fulltextindex.core.FullTextIndexHandlerFactory; import neatlogic.framework.fulltextindex.core.IFullTextIndexHandler; import neatlogic.framework.process.auth.PROCESSTASK_MODIFY; import neatlogic.framework.process.constvalue.ProcessTaskAuditType; +import neatlogic.framework.process.constvalue.ProcessTaskOperationType; import neatlogic.framework.process.constvalue.ProcessTaskStepDataType; import neatlogic.framework.process.dto.*; import neatlogic.framework.process.fulltextindex.ProcessFullTextIndexType; +import neatlogic.framework.process.operationauth.core.ProcessAuthManager; import neatlogic.framework.restful.annotation.Description; import neatlogic.framework.restful.annotation.Input; import neatlogic.framework.restful.annotation.OperationType; @@ -51,7 +53,7 @@ import java.util.Objects; @Service @Transactional @OperationType(type = OperationTypeEnum.UPDATE) -@AuthAction(action = PROCESSTASK_MODIFY.class) +//@AuthAction(action = PROCESSTASK_MODIFY.class) public class UpdateProcessTaskFormApi extends PrivateApiComponentBase { @Resource @@ -93,6 +95,12 @@ public class UpdateProcessTaskFormApi extends PrivateApiComponentBase { ProcessTaskVo processTaskVo = processTaskService.checkProcessTaskParamsIsLegal(processTaskId); // 锁定当前流程 processTaskMapper.getProcessTaskLockById(processTaskId); + String userUuid = UserContext.get().getUserUuid(); + if (!AuthActionChecker.checkByUserUuid(userUuid, PROCESSTASK_MODIFY.class.getSimpleName())) { + new ProcessAuthManager.TaskOperationChecker(processTaskId, ProcessTaskOperationType.PROCESSTASK_UPDATE) + .build() + .checkAndNoPermissionThrowException(); + } ProcessTaskStepVo processTaskStepVo = new ProcessTaskStepVo(); processTaskStepVo.setProcessTaskId(processTaskId); processTaskStepVo.setIsAutoGenerateId(false); -- Gitee