bonus
/
cqdevicemgt
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

springboot未授权访问漏洞修改

This commit is contained in:
liang.chao 2024-09-29 13:32:54 +08:00
parent 15c1a7e89a
commit 67eb17b150
3 changed files with 6 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
sgzb-modules/sgzb-material/src/main/java/com/bonus/sgzb/base/controller/BmProjectLotController.java
View File

@ -38,6 +38,7 @@ public class BmProjectLotController extends BaseController {
*/ */
@ApiOperation(value = "获取标段工程项目") @ApiOperation(value = "获取标段工程项目")
@GetMapping("/projectLotAll") @GetMapping("/projectLotAll")
@RequiresPermissions("section:list")
public TableDataInfo getProjectLotAll(BmProjectLot bmProjectLot) { public TableDataInfo getProjectLotAll(BmProjectLot bmProjectLot) {
startPage(); startPage();
List<BmProjectLot> list = bmProjectLotService.getProjectLotAll(bmProjectLot); List<BmProjectLot> list = bmProjectLotService.getProjectLotAll(bmProjectLot);
@ -64,6 +65,7 @@ public class BmProjectLotController extends BaseController {
@ApiOperation("新增标段工程项目") @ApiOperation("新增标段工程项目")
@Log(title = "参数管理", businessType = BusinessType.INSERT) @Log(title = "参数管理", businessType = BusinessType.INSERT)
@PostMapping @PostMapping
@RequiresPermissions("section:list:add")
public AjaxResult projectLotAdd(@Validated @RequestBody BmProjectLot bmProjectLot) { public AjaxResult projectLotAdd(@Validated @RequestBody BmProjectLot bmProjectLot) {
return bmProjectLotService.projectLotAdd(bmProjectLot); return bmProjectLotService.projectLotAdd(bmProjectLot);
} }

2
sgzb-modules/sgzb-material/src/main/java/com/bonus/sgzb/base/controller/BmUnitInfoController.java
View File

@ -45,6 +45,7 @@ public class BmUnitInfoController extends BaseController{
*/ */
@ApiOperation(value = "获取往来单位列表") @ApiOperation(value = "获取往来单位列表")
@GetMapping("/unitInfoAll") @GetMapping("/unitInfoAll")
@RequiresPermissions("comeAndGo:list")
public TableDataInfo getUnitInfoAll(BmUnitInfo bmUnitInfo) public TableDataInfo getUnitInfoAll(BmUnitInfo bmUnitInfo)
{ {
startPage(); startPage();
@ -105,6 +106,7 @@ public class BmUnitInfoController extends BaseController{
@ApiOperation(value = "新增往来单位") @ApiOperation(value = "新增往来单位")
@Log(title = "参数管理", businessType = BusinessType.INSERT) @Log(title = "参数管理", businessType = BusinessType.INSERT)
@PostMapping @PostMapping
@RequiresPermissions("comeAndGo:list:add")
public AjaxResult unitInfoAdd(@Validated @RequestBody BmUnitInfo bmUnitInfo) public AjaxResult unitInfoAdd(@Validated @RequestBody BmUnitInfo bmUnitInfo)
{ {
log.info("新增往来单位参数：{}", bmUnitInfo); log.info("新增往来单位参数：{}", bmUnitInfo);

2
sgzb-modules/sgzb-material/src/main/java/com/bonus/sgzb/base/controller/SysDicController.java
View File

@ -39,6 +39,7 @@ public class SysDicController extends BaseController
*/ */
@ApiOperation(value = "查询数据字典列表") @ApiOperation(value = "查询数据字典列表")
@GetMapping("/list") @GetMapping("/list")
@RequiresPermissions("system:dict:query")
public TableDataInfo list(SysDic sysDic) public TableDataInfo list(SysDic sysDic)
{ {
startPage(); startPage();
@ -113,6 +114,7 @@ public class SysDicController extends BaseController
@ApiOperation(value = "新增数据字典") @ApiOperation(value = "新增数据字典")
@Log(title = "数据字典", businessType = BusinessType.INSERT) @Log(title = "数据字典", businessType = BusinessType.INSERT)
@PostMapping @PostMapping
@RequiresPermissions("system:dict:add")
public AjaxResult add(@RequestBody SysDic sysDic) public AjaxResult add(@RequestBody SysDic sysDic)
{ {
return sysDicService.insertSysDic(sysDic); return sysDicService.insertSysDic(sysDic);