peihaoyu/forest
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

🐛 完善用户权限判断

Browse Source
This commit is contained in:
ronger 2024-05-16 20:23:03 +08:00
parent 0d890c302b
commit f6b6ad3f58
3 changed files with 9 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
src/main/java/com/rymcu/forest/service/UserService.java
View File

@ -197,4 +197,6 @@ public interface UserService extends Service<User> {
* @return
*/
Set<String> findUserPermissions(User user);
boolean hasAdminPermission(String account);
}

5
src/main/java/com/rymcu/forest/service/impl/ArticleServiceImpl.java
View File

@ -59,7 +59,6 @@ public class ArticleServiceImpl extends AbstractService<Article> implements Arti
private static final int MAX_PREVIEW = 200;
private static final String DEFAULT_STATUS = "0";
private static final String DEFAULT_TOPIC_URI = "news";
private static final int ADMIN_ROLE_WEIGHTS = 2;
@Resource
private ApplicationEventPublisher applicationEventPublisher;
@ -116,8 +115,8 @@ public class ArticleServiceImpl extends AbstractService<Article> implements Arti
String reservedTag = checkTags(articleTags);
boolean notification = false;
if (StringUtils.isNotBlank(reservedTag)) {
Integer roleWeights = userService.findRoleWeightsByUser(user.getIdUser());
if (roleWeights > ADMIN_ROLE_WEIGHTS) {
boolean isAdmin = userService.hasAdminPermission(user.getEmail());
if (!isAdmin) {
throw new UltraViresException(StringEscapeUtils.unescapeJava(reservedTag) + "标签为系统保留标签!");
} else {
notification = true;

5
src/main/java/com/rymcu/forest/service/impl/UserServiceImpl.java
View File

@ -332,4 +332,9 @@ public class UserServiceImpl extends AbstractService<User> implements UserServic
permissions.add("user");
return permissions;
}
@Override
public boolean hasAdminPermission(String account) {
return userMapper.hasAdminPermission(account);
}
}