From 42b59cf6ddf5f8e8afee5bcb784f64b627a788fb Mon Sep 17 00:00:00 2001
From: ronger <ronger-x@outlook.com>
Date: Wed, 29 Dec 2021 12:00:25 +0800
Subject: [PATCH 01/12] =?UTF-8?q?:bug:=20=E4=BA=A4=E6=98=93=E8=AE=B0?=
 =?UTF-8?q?=E5=BD=95=E6=9F=A5=E8=AF=A2=E9=97=AE=E9=A2=98=E4=BF=AE=E5=A4=8D?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 src/main/java/mapper/TransactionRecordMapper.xml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/src/main/java/mapper/TransactionRecordMapper.xml b/src/main/java/mapper/TransactionRecordMapper.xml
index 62df2f2..62ff7e7 100644
--- a/src/main/java/mapper/TransactionRecordMapper.xml
+++ b/src/main/java/mapper/TransactionRecordMapper.xml
@@ -17,8 +17,8 @@
     </update>
     <select id="selectTransactionRecords" resultMap="DTOResultMap">
         select * from forest_transaction_record ftr
-        where form_bank_account = #{bankAccount} or to_bank_account = #{bankAccount}
-        and transaction_time between str_to_date(#{startDate}, '%Y-%m-%d') and str_to_date(#{endDate}, '%Y-%m-%d') + 1
+        where (form_bank_account = #{bankAccount} or to_bank_account = #{bankAccount})
+        and transaction_time between str_to_date(#{startDate}, '%Y-%m-%d') and str_to_date(#{endDate}, '%Y-%m-%d')  + 1
         order by transaction_time desc
     </select>
     <select id="existsWithBankAccountAndFunds" resultType="java.lang.Boolean">

From b39112be30c954aa302b216384ed4abfde58e159 Mon Sep 17 00:00:00 2001
From: ronger <ronger-x@outlook.com>
Date: Wed, 29 Dec 2021 12:06:57 +0800
Subject: [PATCH 02/12] :arrow_up: log4j-api

---
 pom.xml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pom.xml b/pom.xml
index 57e38bc..d153741 100644
--- a/pom.xml
+++ b/pom.xml
@@ -163,7 +163,7 @@
         <dependency>
             <groupId>org.apache.logging.log4j</groupId>
             <artifactId>log4j-to-slf4j</artifactId>
-            <version>2.17.0</version>
+            <version>2.17.1</version>
             <exclusions>
                 <exclusion>
                     <groupId>org.apache.logging.log4j</groupId>
@@ -174,7 +174,7 @@
         <dependency>
             <groupId>org.apache.logging.log4j</groupId>
             <artifactId>log4j-api</artifactId>
-            <version>2.17.0</version>
+            <version>2.17.1</version>
         </dependency>
         <dependency>
             <groupId>org.springframework.boot</groupId>

From 6a1bd7869a7e61c2654f9d49b4aac2fb6785e63b Mon Sep 17 00:00:00 2001
From: ronger <ronger-x@outlook.com>
Date: Mon, 3 Jan 2022 16:23:39 +0800
Subject: [PATCH 03/12] =?UTF-8?q?:art:=20=E6=96=87=E7=AB=A0=E4=BC=98?=
 =?UTF-8?q?=E9=80=89=E6=8E=A5=E5=8F=A3=E5=9C=B0=E5=9D=80=E5=8F=98=E6=9B=B4?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 .../web/api/admin/AdminArticleController.java | 33 +++++++++++++++++++
 .../web/api/article/ArticleController.java    |  6 ----
 2 files changed, 33 insertions(+), 6 deletions(-)
 create mode 100644 src/main/java/com/rymcu/forest/web/api/admin/AdminArticleController.java

diff --git a/src/main/java/com/rymcu/forest/web/api/admin/AdminArticleController.java b/src/main/java/com/rymcu/forest/web/api/admin/AdminArticleController.java
new file mode 100644
index 0000000..8d14194
--- /dev/null
+++ b/src/main/java/com/rymcu/forest/web/api/admin/AdminArticleController.java
@@ -0,0 +1,33 @@
+package com.rymcu.forest.web.api.admin;
+
+import com.rymcu.forest.core.result.GlobalResult;
+import com.rymcu.forest.core.result.GlobalResultGenerator;
+import com.rymcu.forest.entity.Article;
+import com.rymcu.forest.service.ArticleService;
+import org.springframework.web.bind.annotation.PatchMapping;
+import org.springframework.web.bind.annotation.RequestBody;
+import org.springframework.web.bind.annotation.RequestMapping;
+import org.springframework.web.bind.annotation.RestController;
+
+import javax.annotation.Resource;
+import java.util.Map;
+
+/**
+ * Created on 2022/1/3 10:11.
+ *
+ * @author ronger
+ * @email ronger-x@outlook.com
+ */
+@RestController
+@RequestMapping("/api/v1/admin/article")
+public class AdminArticleController {
+
+    @Resource
+    private ArticleService articleService;
+
+    @PatchMapping("/update-perfect")
+    public GlobalResult updatePerfect(@RequestBody Article article) {
+        Map map = articleService.updatePerfect(article.getIdArticle(), article.getArticlePerfect());
+        return GlobalResultGenerator.genSuccessResult(map);
+    }
+}
diff --git a/src/main/java/com/rymcu/forest/web/api/article/ArticleController.java b/src/main/java/com/rymcu/forest/web/api/article/ArticleController.java
index 69a6d98..09a798d 100644
--- a/src/main/java/com/rymcu/forest/web/api/article/ArticleController.java
+++ b/src/main/java/com/rymcu/forest/web/api/article/ArticleController.java
@@ -95,12 +95,6 @@ public class ArticleController {
         return GlobalResultGenerator.genSuccessResult(map);
     }
 
-    @PatchMapping("/update-perfect")
-    public GlobalResult updatePerfect(@RequestBody Article article) {
-        Map map = articleService.updatePerfect(article.getIdArticle(), article.getArticlePerfect());
-        return GlobalResultGenerator.genSuccessResult(map);
-    }
-
     @PostMapping("/thumbs-up")
     public GlobalResult thumbsUp(@RequestBody ArticleThumbsUp articleThumbsUp) throws BaseApiException {
         Map map = articleThumbsUpService.thumbsUp(articleThumbsUp);

From 8b09370cf2e69f643cde6bb7cc984b4f7c0a4be4 Mon Sep 17 00:00:00 2001
From: ronger <ronger-x@outlook.com>
Date: Mon, 3 Jan 2022 19:22:47 +0800
Subject: [PATCH 04/12] =?UTF-8?q?:art:=20=E5=88=A0=E9=99=A4=E6=97=A0?=
 =?UTF-8?q?=E6=95=88=E4=BB=A3=E7=A0=81?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 .../rymcu/forest/service/impl/ArticleServiceImpl.java | 11 ++++-------
 1 file changed, 4 insertions(+), 7 deletions(-)

diff --git a/src/main/java/com/rymcu/forest/service/impl/ArticleServiceImpl.java b/src/main/java/com/rymcu/forest/service/impl/ArticleServiceImpl.java
index 970bbf6..10d344a 100644
--- a/src/main/java/com/rymcu/forest/service/impl/ArticleServiceImpl.java
+++ b/src/main/java/com/rymcu/forest/service/impl/ArticleServiceImpl.java
@@ -242,13 +242,10 @@ public class ArticleServiceImpl extends AbstractService<Article> implements Arti
         if (Objects.isNull(user)) {
             throw new BaseApiException(ErrorCode.INVALID_TOKEN);
         }
-        Integer roleWeights = userService.findRoleWeightsByUser(user.getIdUser());
-        if (roleWeights > ADMIN_ROLE_WEIGHTS) {
-            Article article = articleMapper.selectByPrimaryKey(id);
-            if (!user.getIdUser().equals(article.getArticleAuthorId())) {
-                map.put("message", "非法访问！");
-                return map;
-            }
+        Article article = articleMapper.selectByPrimaryKey(id);
+        if (!user.getIdUser().equals(article.getArticleAuthorId())) {
+            map.put("message", "非法访问！");
+            return map;
         }
         int result;
         // 判断是否有评论

From 87956215311215ae4c2699409a67824f968f4695 Mon Sep 17 00:00:00 2001
From: ronger <ronger-x@outlook.com>
Date: Mon, 3 Jan 2022 21:27:48 +0800
Subject: [PATCH 05/12] =?UTF-8?q?:art:=20=E5=88=A0=E9=99=A4=E6=97=A0?=
 =?UTF-8?q?=E6=95=88=E4=BB=A3=E7=A0=81?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 .../service/impl/ArticleServiceImpl.java      | 31 ++++++++++++-------
 1 file changed, 20 insertions(+), 11 deletions(-)

diff --git a/src/main/java/com/rymcu/forest/service/impl/ArticleServiceImpl.java b/src/main/java/com/rymcu/forest/service/impl/ArticleServiceImpl.java
index 10d344a..be8d1aa 100644
--- a/src/main/java/com/rymcu/forest/service/impl/ArticleServiceImpl.java
+++ b/src/main/java/com/rymcu/forest/service/impl/ArticleServiceImpl.java
@@ -143,7 +143,7 @@ public class ArticleServiceImpl extends AbstractService<Article> implements Arti
             if (DEFAULT_STATUS.equals(newArticle.getArticleStatus())) {
                 isUpdate = true;
             }
-            if (!user.getIdUser().equals(newArticle.getArticleAuthorId())) {
+            if (!isAuthor(newArticle.getArticleAuthorId())) {
                 map.put("message", "非法访问！");
                 return map;
             }
@@ -237,13 +237,9 @@ public class ArticleServiceImpl extends AbstractService<Article> implements Arti
     @Transactional(rollbackFor = Exception.class)
     public Map delete(Integer id) throws BaseApiException {
         Map<String, String> map = new HashMap(1);
-        // 鉴权
-        User user = UserUtils.getCurrentUserByToken();
-        if (Objects.isNull(user)) {
-            throw new BaseApiException(ErrorCode.INVALID_TOKEN);
-        }
         Article article = articleMapper.selectByPrimaryKey(id);
-        if (!user.getIdUser().equals(article.getArticleAuthorId())) {
+        // 鉴权
+        if (!isAuthor(article.getArticleAuthorId())) {
             map.put("message", "非法访问！");
             return map;
         }
@@ -327,10 +323,15 @@ public class ArticleServiceImpl extends AbstractService<Article> implements Arti
         Map map = new HashMap(2);
         Article article = articleMapper.selectByPrimaryKey(idArticle);
         if (Objects.nonNull(article)) {
-            article.setArticleTags(tags);
-            articleMapper.updateArticleTags(idArticle, tags);
-            tagService.saveTagArticle(article, "");
-            map.put("success", true);
+            if (isAuthor(article.getArticleAuthorId())) {
+                article.setArticleTags(tags);
+                articleMapper.updateArticleTags(idArticle, tags);
+                tagService.saveTagArticle(article, "");
+                map.put("success", true);
+            } else {
+                map.put("success", false);
+                map.put("message", "非法访问!");
+            }
         } else {
             map.put("success", false);
             map.put("message", "更新失败,文章不存在!");
@@ -338,6 +339,14 @@ public class ArticleServiceImpl extends AbstractService<Article> implements Arti
         return map;
     }
 
+    private boolean isAuthor(Integer idUser) throws BaseApiException {
+        User user = UserUtils.getCurrentUserByToken();
+        if (Objects.nonNull(user)) {
+            return user.getIdUser().equals(idUser);
+        }
+        return false;
+    }
+
     @Override
     public Map updatePerfect(Integer idArticle, String articlePerfect) {
         Map map = new HashMap(2);

From e7e672a7b75cab23f491bd7f28bc3f12c304032a Mon Sep 17 00:00:00 2001
From: ronger <ronger-x@outlook.com>
Date: Tue, 4 Jan 2022 10:32:56 +0800
Subject: [PATCH 06/12] =?UTF-8?q?:poop:=20=E4=BF=AE=E6=94=B9=E6=96=87?=
 =?UTF-8?q?=E7=AB=A0=E6=A0=87=E7=AD=BE=E8=BF=9B=E8=A1=8C=E9=89=B4=E6=9D=83?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 .../forest/service/impl/ArticleServiceImpl.java      | 12 ++++++++++--
 1 file changed, 10 insertions(+), 2 deletions(-)

diff --git a/src/main/java/com/rymcu/forest/service/impl/ArticleServiceImpl.java b/src/main/java/com/rymcu/forest/service/impl/ArticleServiceImpl.java
index be8d1aa..3652be2 100644
--- a/src/main/java/com/rymcu/forest/service/impl/ArticleServiceImpl.java
+++ b/src/main/java/com/rymcu/forest/service/impl/ArticleServiceImpl.java
@@ -1,7 +1,6 @@
 package com.rymcu.forest.service.impl;
 
 import com.rymcu.forest.core.constant.NotificationConstant;
-import com.rymcu.forest.core.constant.ProjectConstant;
 import com.rymcu.forest.core.service.AbstractService;
 import com.rymcu.forest.dto.*;
 import com.rymcu.forest.entity.Article;
@@ -323,7 +322,7 @@ public class ArticleServiceImpl extends AbstractService<Article> implements Arti
         Map map = new HashMap(2);
         Article article = articleMapper.selectByPrimaryKey(idArticle);
         if (Objects.nonNull(article)) {
-            if (isAuthor(article.getArticleAuthorId())) {
+            if (isAuthor(article.getArticleAuthorId()) || hasAdminPermission()) {
                 article.setArticleTags(tags);
                 articleMapper.updateArticleTags(idArticle, tags);
                 tagService.saveTagArticle(article, "");
@@ -339,6 +338,15 @@ public class ArticleServiceImpl extends AbstractService<Article> implements Arti
         return map;
     }
 
+    private boolean hasAdminPermission() throws BaseApiException {
+        User user = UserUtils.getCurrentUserByToken();
+        if (Objects.nonNull(user)) {
+            Integer userRoleWeight = userService.findRoleWeightsByUser(user.getIdUser());
+            return userRoleWeight <= ADMIN_ROLE_WEIGHTS;
+        }
+        return false;
+    }
+
     private boolean isAuthor(Integer idUser) throws BaseApiException {
         User user = UserUtils.getCurrentUserByToken();
         if (Objects.nonNull(user)) {

From d7923abfd7ce879a1efb466bf31718562d2c8d54 Mon Sep 17 00:00:00 2001
From: ronger <ronger-x@outlook.com>
Date: Tue, 4 Jan 2022 10:33:54 +0800
Subject: [PATCH 07/12] :art: update pom.xml

---
 pom.xml | 1 +
 1 file changed, 1 insertion(+)

diff --git a/pom.xml b/pom.xml
index d153741..2d6927e 100644
--- a/pom.xml
+++ b/pom.xml
@@ -294,6 +294,7 @@
             <plugin>
                 <groupId>org.springframework.boot</groupId>
                 <artifactId>spring-boot-maven-plugin</artifactId>
+                <version>2.3.5.RELEASE</version>
             </plugin>
         </plugins>
         <finalName>forest</finalName>

From d84133c47a0c7512bb258e75f46281f61141d01a Mon Sep 17 00:00:00 2001
From: ronger <ronger-x@outlook.com>
Date: Tue, 4 Jan 2022 10:39:03 +0800
Subject: [PATCH 08/12] =?UTF-8?q?:art:=20=E6=96=87=E7=AB=A0=E5=88=86?=
 =?UTF-8?q?=E4=BA=AB=E6=8E=A5=E5=8F=A3=E5=8F=98=E6=9B=B4?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 .../java/com/rymcu/forest/service/impl/ArticleServiceImpl.java  | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/main/java/com/rymcu/forest/service/impl/ArticleServiceImpl.java b/src/main/java/com/rymcu/forest/service/impl/ArticleServiceImpl.java
index 3652be2..be9d57b 100644
--- a/src/main/java/com/rymcu/forest/service/impl/ArticleServiceImpl.java
+++ b/src/main/java/com/rymcu/forest/service/impl/ArticleServiceImpl.java
@@ -285,7 +285,7 @@ public class ArticleServiceImpl extends AbstractService<Article> implements Arti
             throw new BaseApiException(ErrorCode.INVALID_TOKEN);
         }
         StringBuilder shareUrl = new StringBuilder(article.getArticlePermalink());
-        shareUrl.append("?s=").append(user.getNickname());
+        shareUrl.append("?s=").append(user.getAccount());
         Map map = new HashMap(1);
         map.put("shareUrl", shareUrl);
         return map;

From 91796ade6735720453b7916e4a97ffe6c8de5dd2 Mon Sep 17 00:00:00 2001
From: ronger <ronger-x@outlook.com>
Date: Tue, 4 Jan 2022 22:04:55 +0800
Subject: [PATCH 09/12] =?UTF-8?q?:bug:=20=E6=96=B0=E7=94=A8=E6=88=B7?=
 =?UTF-8?q?=E6=B3=A8=E5=86=8C=E6=8F=90=E7=A4=BA=E6=9C=8D=E5=8A=A1=E5=99=A8?=
 =?UTF-8?q?=E5=BC=80=E5=B0=8F=E5=B7=AE=E9=97=AE=E9=A2=98=E4=BF=AE=E5=A4=8D?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 .../forest/lucene/util/UserIndexUtil.java     | 124 ++++++++++--------
 1 file changed, 67 insertions(+), 57 deletions(-)

diff --git a/src/main/java/com/rymcu/forest/lucene/util/UserIndexUtil.java b/src/main/java/com/rymcu/forest/lucene/util/UserIndexUtil.java
index 884aac6..9386324 100644
--- a/src/main/java/com/rymcu/forest/lucene/util/UserIndexUtil.java
+++ b/src/main/java/com/rymcu/forest/lucene/util/UserIndexUtil.java
@@ -3,6 +3,7 @@ package com.rymcu.forest.lucene.util;
 import cn.hutool.core.io.FileUtil;
 import cn.hutool.core.util.StrUtil;
 import com.rymcu.forest.lucene.model.UserLucene;
+import org.apache.commons.lang.StringUtils;
 import org.apache.lucene.document.Document;
 import org.apache.lucene.document.Field;
 import org.apache.lucene.document.StringField;
@@ -21,67 +22,76 @@ import java.util.Arrays;
  */
 public class UserIndexUtil {
 
-  /** lucene索引保存目录 */
-  private static final String PATH = System.getProperty("user.dir") + StrUtil.SLASH + LucenePath.USER_PATH;
+    /**
+     * lucene索引保存目录
+     */
+    private static final String PATH = System.getProperty("user.dir") + StrUtil.SLASH + LucenePath.USER_PATH;
 
-  /** 系统运行时索引保存目录 */
-  private static final String INDEX_PATH = LucenePath.USER_INCREMENT_INDEX_PATH;
+    /**
+     * 系统运行时索引保存目录
+     */
+    private static final String INDEX_PATH = LucenePath.USER_INCREMENT_INDEX_PATH;
 
-  /** 删除所有运行中保存的索引 */
-  public static void deleteAllIndex() {
-    if (FileUtil.exist(INDEX_PATH)) {
-      FileUtil.del(INDEX_PATH);
+    /**
+     * 删除所有运行中保存的索引
+     */
+    public static void deleteAllIndex() {
+        if (FileUtil.exist(INDEX_PATH)) {
+            FileUtil.del(INDEX_PATH);
+        }
     }
-  }
 
-  public static void addIndex(UserLucene t) {
-    creatIndex(t);
-  }
-
-  public static void updateIndex(UserLucene t) {
-    deleteIndex(t.getIdUser().toString());
-    creatIndex(t);
-  }
-
-  /**
-   * 增加或创建单个索引
-   *
-   * @param t
-   * @throws Exception
-   */
-  private static synchronized void creatIndex(UserLucene t) {
-    System.out.println("创建单个索引");
-    IndexWriter writer;
-    try {
-      writer = IndexUtil.getIndexWriter(INDEX_PATH, false);
-      Document doc = new Document();
-      doc.add(new StringField("id", t.getIdUser() + "", Field.Store.YES));
-      doc.add(new TextField("nickname", t.getNickname(), Field.Store.YES));
-      doc.add(new TextField("signature", t.getSignature(), Field.Store.YES));
-      writer.addDocument(doc);
-      writer.close();
-    } catch (IOException e) {
-      e.printStackTrace();
+    public static void addIndex(UserLucene t) {
+        creatIndex(t);
     }
-  }
 
-  /** 删除单个索引 */
-  public static synchronized void deleteIndex(String id) {
-    Arrays.stream(FileUtil.ls(PATH))
-        .forEach(
-            each -> {
-              if (each.isDirectory()) {
-                IndexWriter writer;
-                try {
-                  writer = IndexUtil.getIndexWriter(each.getAbsolutePath(), false);
-                  writer.deleteDocuments(new Term("id", id));
-                  writer.forceMergeDeletes(); // 强制删除
-                  writer.commit();
-                  writer.close();
-                } catch (IOException e) {
-                  e.printStackTrace();
-                }
-              }
-            });
-  }
+    public static void updateIndex(UserLucene t) {
+        deleteIndex(t.getIdUser().toString());
+        creatIndex(t);
+    }
+
+    /**
+     * 增加或创建单个索引
+     *
+     * @param t
+     * @throws Exception
+     */
+    private static synchronized void creatIndex(UserLucene t) {
+        System.out.println("创建单个索引");
+        IndexWriter writer;
+        try {
+            writer = IndexUtil.getIndexWriter(INDEX_PATH, false);
+            Document doc = new Document();
+            doc.add(new StringField("id", t.getIdUser() + "", Field.Store.YES));
+            doc.add(new TextField("nickname", t.getNickname(), Field.Store.YES));
+            // 新注册用户无签名
+            doc.add(new TextField("signature", StringUtils.isNotBlank(t.getSignature()) ? t.getSignature() : "", Field.Store.YES));
+            writer.addDocument(doc);
+            writer.close();
+        } catch (IOException e) {
+            e.printStackTrace();
+        }
+    }
+
+    /**
+     * 删除单个索引
+     */
+    public static synchronized void deleteIndex(String id) {
+        Arrays.stream(FileUtil.ls(PATH))
+                .forEach(
+                        each -> {
+                            if (each.isDirectory()) {
+                                IndexWriter writer;
+                                try {
+                                    writer = IndexUtil.getIndexWriter(each.getAbsolutePath(), false);
+                                    writer.deleteDocuments(new Term("id", id));
+                                    writer.forceMergeDeletes(); // 强制删除
+                                    writer.commit();
+                                    writer.close();
+                                } catch (IOException e) {
+                                    e.printStackTrace();
+                                }
+                            }
+                        });
+    }
 }

From b1a9d8e427ba80d98038107352aedaf752d6542b Mon Sep 17 00:00:00 2001
From: ronger <ronger-x@outlook.com>
Date: Tue, 4 Jan 2022 22:51:25 +0800
Subject: [PATCH 10/12] =?UTF-8?q?:bug:=20=E6=99=AE=E9=80=9A=E7=94=A8?=
 =?UTF-8?q?=E6=88=B7=E6=97=A0=E6=B3=95=E6=89=93=E5=BC=80=E6=88=91=E7=9A=84?=
 =?UTF-8?q?=E9=92=B1=E5=8C=85=E9=97=AE=E9=A2=98=E4=BF=AE=E5=A4=8D?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 .../com/rymcu/forest/jwt/aop/RestAuthTokenInterceptor.java    | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/src/main/java/com/rymcu/forest/jwt/aop/RestAuthTokenInterceptor.java b/src/main/java/com/rymcu/forest/jwt/aop/RestAuthTokenInterceptor.java
index 256a0e8..ba42544 100644
--- a/src/main/java/com/rymcu/forest/jwt/aop/RestAuthTokenInterceptor.java
+++ b/src/main/java/com/rymcu/forest/jwt/aop/RestAuthTokenInterceptor.java
@@ -68,8 +68,8 @@ public class RestAuthTokenInterceptor implements HandlerInterceptor {
 			request.setAttribute(JwtConstants.CURRENT_USER_NAME, model.getUsername());
 			String uri = request.getRequestURI();
 			// 判断是否为后台接口或财政划转接口
-			String adminApi = "/admin";
-			String transactionApi = "/transaction";
+			String adminApi = "/admin/";
+			String transactionApi = "/transaction/";
 			if (uri.contains(adminApi) || uri.contains(transactionApi)) {
 				// 判断管理员权限
 				boolean hasPermission = userMapper.hasAdminPermission(model.getUsername());

From f3c1969edc55336855ab0554ca21bc9356c6a168 Mon Sep 17 00:00:00 2001
From: ronger <ronger-x@outlook.com>
Date: Wed, 5 Jan 2022 20:02:44 +0800
Subject: [PATCH 11/12] =?UTF-8?q?:bug:=20=E7=BB=93=E6=9D=9F=E6=97=A5?=
 =?UTF-8?q?=E6=9C=9F=E4=B8=BA=E6=9C=88=E6=9C=AB=E6=97=B6=EF=BC=8C=E6=9F=A5?=
 =?UTF-8?q?=E8=AF=A2=E4=B8=8D=E5=88=B0=E6=95=B0=E6=8D=AE=E9=97=AE=E9=A2=98?=
 =?UTF-8?q?=E4=BF=AE=E5=A4=8D?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 src/main/java/mapper/TransactionRecordMapper.xml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/main/java/mapper/TransactionRecordMapper.xml b/src/main/java/mapper/TransactionRecordMapper.xml
index 62ff7e7..f0dd586 100644
--- a/src/main/java/mapper/TransactionRecordMapper.xml
+++ b/src/main/java/mapper/TransactionRecordMapper.xml
@@ -18,7 +18,7 @@
     <select id="selectTransactionRecords" resultMap="DTOResultMap">
         select * from forest_transaction_record ftr
         where (form_bank_account = #{bankAccount} or to_bank_account = #{bankAccount})
-        and transaction_time between str_to_date(#{startDate}, '%Y-%m-%d') and str_to_date(#{endDate}, '%Y-%m-%d')  + 1
+        and transaction_time between str_to_date(#{startDate}, '%Y-%m-%d') and str_to_date(#{endDate}, '%Y-%m-%d') + interval 1 day
         order by transaction_time desc
     </select>
     <select id="existsWithBankAccountAndFunds" resultType="java.lang.Boolean">

From f9f3f4b7776d50fb7bab9c6e604d660ddf05b6f4 Mon Sep 17 00:00:00 2001
From: ronger <ronger-x@outlook.com>
Date: Wed, 5 Jan 2022 20:54:34 +0800
Subject: [PATCH 12/12] =?UTF-8?q?:bug:=20=E4=BF=AE=E5=A4=8D=E5=B7=B2?=
 =?UTF-8?q?=E7=9F=A5=E7=9A=84=E5=AE=89=E5=85=A8=E9=97=AE=E9=A2=98?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 .../service/security/AuthorshipAspect.java    | 178 ++++++++++++++++++
 .../annotation/AuthorshipInterceptor.java     |  21 +++
 .../com/rymcu/forest/enumerate/Module.java    |  12 ++
 .../service/impl/ArticleServiceImpl.java      |  45 +----
 .../web/api/article/ArticleController.java    |  35 ++--
 .../web/api/common/CommonApiController.java   |   6 +-
 .../api/portfolio/PortfolioController.java    |  20 +-
 7 files changed, 257 insertions(+), 60 deletions(-)
 create mode 100644 src/main/java/com/rymcu/forest/core/service/security/AuthorshipAspect.java
 create mode 100644 src/main/java/com/rymcu/forest/core/service/security/annotation/AuthorshipInterceptor.java
 create mode 100644 src/main/java/com/rymcu/forest/enumerate/Module.java

diff --git a/src/main/java/com/rymcu/forest/core/service/security/AuthorshipAspect.java b/src/main/java/com/rymcu/forest/core/service/security/AuthorshipAspect.java
new file mode 100644
index 0000000..b937046
--- /dev/null
+++ b/src/main/java/com/rymcu/forest/core/service/security/AuthorshipAspect.java
@@ -0,0 +1,178 @@
+package com.rymcu.forest.core.service.security;
+
+import com.alibaba.fastjson.JSON;
+import com.alibaba.fastjson.JSONObject;
+import com.rymcu.forest.core.service.security.annotation.AuthorshipInterceptor;
+import com.rymcu.forest.dto.TokenUser;
+import com.rymcu.forest.entity.Article;
+import com.rymcu.forest.entity.Portfolio;
+import com.rymcu.forest.enumerate.Module;
+import com.rymcu.forest.jwt.def.JwtConstants;
+import com.rymcu.forest.service.ArticleService;
+import com.rymcu.forest.service.PortfolioService;
+import com.rymcu.forest.util.UserUtils;
+import com.rymcu.forest.web.api.exception.BaseApiException;
+import com.rymcu.forest.web.api.exception.ErrorCode;
+import org.apache.commons.lang.StringUtils;
+import org.aspectj.lang.JoinPoint;
+import org.aspectj.lang.annotation.Aspect;
+import org.aspectj.lang.annotation.Before;
+import org.aspectj.lang.annotation.Pointcut;
+import org.slf4j.Logger;
+import org.slf4j.LoggerFactory;
+import org.springframework.stereotype.Component;
+import org.springframework.web.context.request.RequestContextHolder;
+import org.springframework.web.context.request.ServletRequestAttributes;
+import org.springframework.web.servlet.HandlerMapping;
+
+import javax.annotation.Resource;
+import javax.servlet.http.HttpServletRequest;
+import java.lang.reflect.Method;
+import java.util.Enumeration;
+import java.util.HashMap;
+import java.util.Map;
+import java.util.Objects;
+
+/**
+ * 检查用户修改信息权限
+ *
+ * @author ronger
+ */
+@Aspect
+@Component
+public class AuthorshipAspect {
+
+    Logger logger = LoggerFactory.getLogger(AuthorshipAspect.class);
+
+    @Pointcut("@annotation(com.rymcu.forest.core.service.security.annotation.AuthorshipInterceptor)")
+    public void authorshipPointCut() {
+    }
+
+    @Resource
+    private ArticleService articleService;
+    @Resource
+    private PortfolioService portfolioService;
+
+    /**
+     * 检查用户修改信息权限
+     *
+     * @param joinPoint 连接点
+     * @return 方法执行结果
+     * @throws Throwable 调用出错
+     */
+    @Before(value = "authorshipPointCut()")
+    public void doBefore(JoinPoint joinPoint) throws BaseApiException {
+        logger.info("检查作者身份 start ...");
+        String methodName = joinPoint.getSignature().getName();
+        Method method = currentMethod(joinPoint, methodName);
+        AuthorshipInterceptor log = method.getAnnotation(AuthorshipInterceptor.class);
+        if (Objects.nonNull(log)) {
+            boolean isArticle = true;
+            if (Module.PORTFOLIO.equals(log.moduleName())) {
+                isArticle = false;
+            }
+            HttpServletRequest request = ((ServletRequestAttributes) Objects.requireNonNull(RequestContextHolder.getRequestAttributes())).getRequest();
+            String idArticle = "";
+            Integer idAuthor = 0;
+            if (isAjax(request)) {
+                Object[] objects = joinPoint.getArgs();
+                JSONObject jsonObject = JSONObject.parseObject(JSON.toJSONString(objects[0]));
+                if (Objects.nonNull(jsonObject)) {
+                    if (isArticle) {
+                        idArticle = jsonObject.getString("idArticle");
+                        Article article = articleService.findById(idArticle);
+                        if (Objects.nonNull(article)) {
+                            idAuthor = article.getArticleAuthorId();
+                        }
+                    } else {
+                        idArticle = jsonObject.getString("idPortfolio");
+                        Portfolio portfolio = portfolioService.findById(idArticle);
+                        if (Objects.nonNull(portfolio)) {
+                            idAuthor = portfolio.getPortfolioAuthorId();
+                        }
+                    }
+                }
+            } else {
+                Map params = getParams(request);
+                if (params.isEmpty()) {
+                    params = (Map) request.getAttribute(HandlerMapping.URI_TEMPLATE_VARIABLES_ATTRIBUTE);
+                } else {
+                    params.putAll((Map) request.getAttribute(HandlerMapping.URI_TEMPLATE_VARIABLES_ATTRIBUTE));
+                }
+                if (isArticle) {
+                    idArticle = (String) params.get("idArticle");
+                    Article article = articleService.findById(idArticle);
+                    if (Objects.nonNull(article)) {
+                        idAuthor = article.getArticleAuthorId();
+                    }
+                } else {
+                    idArticle = (String) params.get("idPortfolio");
+                    Portfolio portfolio = portfolioService.findById(idArticle);
+                    if (Objects.nonNull(portfolio)) {
+                        idAuthor = portfolio.getPortfolioAuthorId();
+                    }
+                }
+            }
+            if (idAuthor > 0) {
+                String authHeader = request.getHeader(JwtConstants.AUTHORIZATION);
+                if (StringUtils.isNotBlank(authHeader)) {
+                    TokenUser tokenUser = UserUtils.getTokenUser(authHeader);
+                    if (Objects.nonNull(tokenUser)) {
+                        if (!idAuthor.equals(tokenUser.getIdUser())) {
+                            throw new BaseApiException(ErrorCode.ACCESS_DENIED);
+                        }
+                    } else {
+                        throw new BaseApiException(ErrorCode.ACCESS_DENIED);
+                    }
+                }
+            } else {
+                throw new BaseApiException(ErrorCode.ACCESS_DENIED);
+            }
+        }
+        logger.info("检查作者身份 end ...");
+    }
+
+    /**
+     * 获取当前执行的方法
+     *
+     * @param joinPoint  连接点
+     * @param methodName 方法名称
+     * @return 方法
+     */
+    private Method currentMethod(JoinPoint joinPoint, String methodName) {
+        /**
+         * 获取目标类的所有方法，找到当前要执行的方法
+         */
+        Method[] methods = joinPoint.getTarget().getClass().getMethods();
+        Method resultMethod = null;
+        for (Method method : methods) {
+            if (method.getName().equals(methodName)) {
+                resultMethod = method;
+                break;
+            }
+        }
+        return resultMethod;
+    }
+
+    private Map<String, String> getParams(HttpServletRequest request) {
+        Map<String, String> paramsMap = new HashMap<>(10);
+        Enumeration<String> paraNames = request.getParameterNames();
+        while (paraNames.hasMoreElements()) {
+            String key = paraNames.nextElement();
+            if ("password".equals(key)) {
+                continue;
+            }
+            paramsMap.put(key, request.getParameter(key));
+        }
+        return paramsMap;
+    }
+
+    private boolean isAjax(HttpServletRequest request) {
+        String requestedWith = request.getHeader("x-requested-with");
+        if (requestedWith != null && "XMLHttpRequest".equalsIgnoreCase(requestedWith)) {
+            return true;
+        }
+        String contentType = request.getContentType();
+        return StringUtils.isNotBlank(contentType) && contentType.contains("application/json");
+    }
+}
diff --git a/src/main/java/com/rymcu/forest/core/service/security/annotation/AuthorshipInterceptor.java b/src/main/java/com/rymcu/forest/core/service/security/annotation/AuthorshipInterceptor.java
new file mode 100644
index 0000000..efb4bb1
--- /dev/null
+++ b/src/main/java/com/rymcu/forest/core/service/security/annotation/AuthorshipInterceptor.java
@@ -0,0 +1,21 @@
+package com.rymcu.forest.core.service.security.annotation;
+
+import com.rymcu.forest.enumerate.Module;
+
+import java.lang.annotation.ElementType;
+import java.lang.annotation.Retention;
+import java.lang.annotation.RetentionPolicy;
+import java.lang.annotation.Target;
+
+/**
+ * Created on 2022/1/5 19:46.
+ *
+ * @author ronger
+ * @email ronger-x@outlook.com
+ */
+
+@Target({ElementType.METHOD, ElementType.TYPE})
+@Retention(RetentionPolicy.RUNTIME)
+public @interface AuthorshipInterceptor {
+    Module moduleName();
+}
diff --git a/src/main/java/com/rymcu/forest/enumerate/Module.java b/src/main/java/com/rymcu/forest/enumerate/Module.java
new file mode 100644
index 0000000..c25fa6e
--- /dev/null
+++ b/src/main/java/com/rymcu/forest/enumerate/Module.java
@@ -0,0 +1,12 @@
+package com.rymcu.forest.enumerate;
+
+/**
+ * Created on 2022/1/5 20:05.
+ *
+ * @author ronger
+ * @email ronger-x@outlook.com
+ */
+public enum Module {
+    ARTICLE,
+    PORTFOLIO;
+}
diff --git a/src/main/java/com/rymcu/forest/service/impl/ArticleServiceImpl.java b/src/main/java/com/rymcu/forest/service/impl/ArticleServiceImpl.java
index be9d57b..7113a57 100644
--- a/src/main/java/com/rymcu/forest/service/impl/ArticleServiceImpl.java
+++ b/src/main/java/com/rymcu/forest/service/impl/ArticleServiceImpl.java
@@ -12,7 +12,10 @@ import com.rymcu.forest.mapper.ArticleMapper;
 import com.rymcu.forest.service.ArticleService;
 import com.rymcu.forest.service.TagService;
 import com.rymcu.forest.service.UserService;
-import com.rymcu.forest.util.*;
+import com.rymcu.forest.util.Html2TextUtil;
+import com.rymcu.forest.util.NotificationUtils;
+import com.rymcu.forest.util.UserUtils;
+import com.rymcu.forest.util.Utils;
 import com.rymcu.forest.web.api.exception.BaseApiException;
 import com.rymcu.forest.web.api.exception.ErrorCode;
 import lombok.extern.slf4j.Slf4j;
@@ -142,10 +145,6 @@ public class ArticleServiceImpl extends AbstractService<Article> implements Arti
             if (DEFAULT_STATUS.equals(newArticle.getArticleStatus())) {
                 isUpdate = true;
             }
-            if (!isAuthor(newArticle.getArticleAuthorId())) {
-                map.put("message", "非法访问！");
-                return map;
-            }
             newArticle.setArticleTitle(articleTitle);
             newArticle.setArticleTags(articleTags);
             newArticle.setArticleStatus(article.getArticleStatus());
@@ -236,12 +235,6 @@ public class ArticleServiceImpl extends AbstractService<Article> implements Arti
     @Transactional(rollbackFor = Exception.class)
     public Map delete(Integer id) throws BaseApiException {
         Map<String, String> map = new HashMap(1);
-        Article article = articleMapper.selectByPrimaryKey(id);
-        // 鉴权
-        if (!isAuthor(article.getArticleAuthorId())) {
-            map.put("message", "非法访问！");
-            return map;
-        }
         int result;
         // 判断是否有评论
         boolean isHavComment = articleMapper.existsCommentWithPrimaryKey(id);
@@ -322,15 +315,10 @@ public class ArticleServiceImpl extends AbstractService<Article> implements Arti
         Map map = new HashMap(2);
         Article article = articleMapper.selectByPrimaryKey(idArticle);
         if (Objects.nonNull(article)) {
-            if (isAuthor(article.getArticleAuthorId()) || hasAdminPermission()) {
-                article.setArticleTags(tags);
-                articleMapper.updateArticleTags(idArticle, tags);
-                tagService.saveTagArticle(article, "");
-                map.put("success", true);
-            } else {
-                map.put("success", false);
-                map.put("message", "非法访问!");
-            }
+            article.setArticleTags(tags);
+            articleMapper.updateArticleTags(idArticle, tags);
+            tagService.saveTagArticle(article, "");
+            map.put("success", true);
         } else {
             map.put("success", false);
             map.put("message", "更新失败,文章不存在!");
@@ -338,23 +326,6 @@ public class ArticleServiceImpl extends AbstractService<Article> implements Arti
         return map;
     }
 
-    private boolean hasAdminPermission() throws BaseApiException {
-        User user = UserUtils.getCurrentUserByToken();
-        if (Objects.nonNull(user)) {
-            Integer userRoleWeight = userService.findRoleWeightsByUser(user.getIdUser());
-            return userRoleWeight <= ADMIN_ROLE_WEIGHTS;
-        }
-        return false;
-    }
-
-    private boolean isAuthor(Integer idUser) throws BaseApiException {
-        User user = UserUtils.getCurrentUserByToken();
-        if (Objects.nonNull(user)) {
-            return user.getIdUser().equals(idUser);
-        }
-        return false;
-    }
-
     @Override
     public Map updatePerfect(Integer idArticle, String articlePerfect) {
         Map map = new HashMap(2);
diff --git a/src/main/java/com/rymcu/forest/web/api/article/ArticleController.java b/src/main/java/com/rymcu/forest/web/api/article/ArticleController.java
index 09a798d..700cbe8 100644
--- a/src/main/java/com/rymcu/forest/web/api/article/ArticleController.java
+++ b/src/main/java/com/rymcu/forest/web/api/article/ArticleController.java
@@ -4,11 +4,13 @@ import com.github.pagehelper.PageHelper;
 import com.github.pagehelper.PageInfo;
 import com.rymcu.forest.core.result.GlobalResult;
 import com.rymcu.forest.core.result.GlobalResultGenerator;
+import com.rymcu.forest.core.service.security.annotation.AuthorshipInterceptor;
 import com.rymcu.forest.dto.ArticleDTO;
 import com.rymcu.forest.dto.CommentDTO;
 import com.rymcu.forest.entity.Article;
 import com.rymcu.forest.entity.ArticleThumbsUp;
 import com.rymcu.forest.entity.Sponsor;
+import com.rymcu.forest.enumerate.Module;
 import com.rymcu.forest.service.ArticleService;
 import com.rymcu.forest.service.ArticleThumbsUpService;
 import com.rymcu.forest.service.CommentService;
@@ -40,9 +42,9 @@ public class ArticleController {
     @Resource
     private SponsorService sponsorService;
 
-    @GetMapping("/detail/{id}")
-    public GlobalResult<Map<String, Object>> detail(@PathVariable Integer id, @RequestParam(defaultValue = "2") Integer type) {
-        ArticleDTO articleDTO = articleService.findArticleDTOById(id, type);
+    @GetMapping("/detail/{idArticle}")
+    public GlobalResult<Map<String, Object>> detail(@PathVariable Integer idArticle, @RequestParam(defaultValue = "2") Integer type) {
+        ArticleDTO articleDTO = articleService.findArticleDTOById(idArticle, type);
         Map map = new HashMap<>(1);
         map.put("article", articleDTO);
         return GlobalResultGenerator.genSuccessResult(map);
@@ -55,20 +57,22 @@ public class ArticleController {
     }
 
     @PutMapping("/post")
+    @AuthorshipInterceptor(moduleName = Module.ARTICLE)
     public GlobalResult updateArticle(@RequestBody ArticleDTO article, HttpServletRequest request) throws BaseApiException, UnsupportedEncodingException {
         Map map = articleService.postArticle(article, request);
         return GlobalResultGenerator.genSuccessResult(map);
     }
 
-    @DeleteMapping("/delete/{id}")
-    public GlobalResult delete(@PathVariable Integer id) throws BaseApiException {
-        Map map = articleService.delete(id);
+    @DeleteMapping("/delete/{idArticle}")
+    @AuthorshipInterceptor(moduleName = Module.ARTICLE)
+    public GlobalResult delete(@PathVariable Integer idArticle) throws BaseApiException {
+        Map map = articleService.delete(idArticle);
         return GlobalResultGenerator.genSuccessResult(map);
     }
 
-    @GetMapping("/{id}/comments")
-    public GlobalResult<Map<String, Object>> commons(@PathVariable Integer id) {
-        List<CommentDTO> commentDTOList = commentService.getArticleComments(id);
+    @GetMapping("/{idArticle}/comments")
+    public GlobalResult<Map<String, Object>> commons(@PathVariable Integer idArticle) {
+        List<CommentDTO> commentDTOList = commentService.getArticleComments(idArticle);
         Map map = new HashMap<>(1);
         map.put("comments", commentDTOList);
         return GlobalResultGenerator.genSuccessResult(map);
@@ -83,15 +87,16 @@ public class ArticleController {
         return GlobalResultGenerator.genSuccessResult(map);
     }
 
-    @GetMapping("/{id}/share")
-    public GlobalResult share(@PathVariable Integer id) throws BaseApiException {
-        Map map = articleService.share(id);
+    @GetMapping("/{idArticle}/share")
+    public GlobalResult share(@PathVariable Integer idArticle) throws BaseApiException {
+        Map map = articleService.share(idArticle);
         return GlobalResultGenerator.genSuccessResult(map);
     }
 
-    @PostMapping("/{id}/update-tags")
-    public GlobalResult updateTags(@PathVariable Integer id, @RequestBody Article article) throws BaseApiException, UnsupportedEncodingException {
-        Map map = articleService.updateTags(id, article.getArticleTags());
+    @PostMapping("/update-tags")
+    @AuthorshipInterceptor(moduleName = Module.ARTICLE)
+    public GlobalResult updateTags(@RequestBody Article article) throws BaseApiException, UnsupportedEncodingException {
+        Map map = articleService.updateTags(article.getIdArticle(), article.getArticleTags());
         return GlobalResultGenerator.genSuccessResult(map);
     }
 
diff --git a/src/main/java/com/rymcu/forest/web/api/common/CommonApiController.java b/src/main/java/com/rymcu/forest/web/api/common/CommonApiController.java
index 7bd8e3b..6436038 100644
--- a/src/main/java/com/rymcu/forest/web/api/common/CommonApiController.java
+++ b/src/main/java/com/rymcu/forest/web/api/common/CommonApiController.java
@@ -7,9 +7,11 @@ import com.rymcu.forest.core.result.GlobalResultGenerator;
 import com.rymcu.forest.core.result.GlobalResultMessage;
 import com.rymcu.forest.core.service.log.annotation.VisitLogger;
 import com.rymcu.forest.dto.*;
-import com.rymcu.forest.entity.Portfolio;
 import com.rymcu.forest.entity.User;
-import com.rymcu.forest.service.*;
+import com.rymcu.forest.service.ArticleService;
+import com.rymcu.forest.service.JavaMailService;
+import com.rymcu.forest.service.PortfolioService;
+import com.rymcu.forest.service.UserService;
 import com.rymcu.forest.util.UserUtils;
 import com.rymcu.forest.util.Utils;
 import org.springframework.web.bind.annotation.*;
diff --git a/src/main/java/com/rymcu/forest/web/api/portfolio/PortfolioController.java b/src/main/java/com/rymcu/forest/web/api/portfolio/PortfolioController.java
index ffaaf73..bff6c14 100644
--- a/src/main/java/com/rymcu/forest/web/api/portfolio/PortfolioController.java
+++ b/src/main/java/com/rymcu/forest/web/api/portfolio/PortfolioController.java
@@ -2,9 +2,11 @@ package com.rymcu.forest.web.api.portfolio;
 
 import com.rymcu.forest.core.result.GlobalResult;
 import com.rymcu.forest.core.result.GlobalResultGenerator;
+import com.rymcu.forest.core.service.security.annotation.AuthorshipInterceptor;
 import com.rymcu.forest.dto.PortfolioArticleDTO;
 import com.rymcu.forest.dto.PortfolioDTO;
 import com.rymcu.forest.entity.Portfolio;
+import com.rymcu.forest.enumerate.Module;
 import com.rymcu.forest.service.PortfolioService;
 import com.rymcu.forest.web.api.exception.BaseApiException;
 import org.springframework.web.bind.annotation.*;
@@ -23,9 +25,9 @@ public class PortfolioController {
     @Resource
     private PortfolioService portfolioService;
 
-    @GetMapping("/detail/{id}")
-    public GlobalResult detail(@PathVariable Integer id,@RequestParam(defaultValue = "0") Integer type) {
-        PortfolioDTO portfolio = portfolioService.findPortfolioDTOById(id, type);
+    @GetMapping("/detail/{idPortfolio}")
+    public GlobalResult detail(@PathVariable Integer idPortfolio,@RequestParam(defaultValue = "0") Integer type) {
+        PortfolioDTO portfolio = portfolioService.findPortfolioDTOById(idPortfolio, type);
         Map map = new HashMap<>(1);
         map.put("portfolio", portfolio);
         return GlobalResultGenerator.genSuccessResult(map);
@@ -38,36 +40,42 @@ public class PortfolioController {
     }
 
     @PutMapping("/post")
+    @AuthorshipInterceptor(moduleName = Module.PORTFOLIO)
     public GlobalResult update(@RequestBody Portfolio portfolio) throws BaseApiException {
         portfolio = portfolioService.postPortfolio(portfolio);
         return GlobalResultGenerator.genSuccessResult(portfolio);
     }
 
-    @GetMapping("/{id}/unbind-articles")
-    public GlobalResult unbindArticles(@RequestParam(defaultValue = "0") Integer page, @RequestParam(defaultValue = "10") Integer rows, @RequestParam(defaultValue = "") String searchText,@PathVariable Integer id) throws BaseApiException {
-        Map map = portfolioService.findUnbindArticles(page, rows, searchText, id);
+    @GetMapping("/{idPortfolio}/unbind-articles")
+    @AuthorshipInterceptor(moduleName = Module.PORTFOLIO)
+    public GlobalResult unbindArticles(@RequestParam(defaultValue = "0") Integer page, @RequestParam(defaultValue = "10") Integer rows, @RequestParam(defaultValue = "") String searchText,@PathVariable Integer idPortfolio) throws BaseApiException {
+        Map map = portfolioService.findUnbindArticles(page, rows, searchText, idPortfolio);
         return GlobalResultGenerator.genSuccessResult(map);
     }
 
     @PostMapping("/bind-article")
+    @AuthorshipInterceptor(moduleName = Module.PORTFOLIO)
     public GlobalResult bindArticle(@RequestBody PortfolioArticleDTO portfolioArticle) {
         Map map = portfolioService.bindArticle(portfolioArticle);
         return GlobalResultGenerator.genSuccessResult(map);
     }
 
     @PutMapping("/update-article-sort-no")
+    @AuthorshipInterceptor(moduleName = Module.PORTFOLIO)
     public GlobalResult updateArticleSortNo(@RequestBody PortfolioArticleDTO portfolioArticle) {
         Map map = portfolioService.updateArticleSortNo(portfolioArticle);
         return GlobalResultGenerator.genSuccessResult(map);
     }
 
     @DeleteMapping("/unbind-article")
+    @AuthorshipInterceptor(moduleName = Module.PORTFOLIO)
     public GlobalResult unbindArticle(Integer idArticle,Integer idPortfolio) {
         Map map = portfolioService.unbindArticle(idPortfolio,idArticle);
         return GlobalResultGenerator.genSuccessResult(map);
     }
 
     @DeleteMapping("/delete")
+    @AuthorshipInterceptor(moduleName = Module.PORTFOLIO)
     public GlobalResult delete(Integer idPortfolio) throws BaseApiException {
         Map map = portfolioService.deletePortfolio(idPortfolio);
         return GlobalResultGenerator.genSuccessResult(map);