Commit 01875185a63cea32c90ead3eac002baf1dd74a42

Authored by wangqian
1 parent 49fa8076

工作流查询接口权限屏蔽

urbanops-module-bpm/src/main/java/com/zteits/urbanops/module/bpm/controller/admin/task/BpmProcessInstanceController.java
... ... @@ -23,6 +23,7 @@ import io.swagger.v3.oas.annotations.Operation;
23 23 import io.swagger.v3.oas.annotations.Parameter;
24 24 import io.swagger.v3.oas.annotations.tags.Tag;
25 25 import jakarta.annotation.Resource;
  26 +import jakarta.annotation.security.PermitAll;
26 27 import jakarta.validation.Valid;
27 28 import org.flowable.engine.history.HistoricProcessInstance;
28 29 import org.flowable.engine.repository.ProcessDefinition;
... ... @@ -173,7 +174,8 @@ public class BpmProcessInstanceController {
173 174 @GetMapping("/get-approval-detail")
174 175 @Operation(summary = "获得审批详情")
175 176 @Parameter(name = "id", description = "流程实例的编号", required = true)
176   - @PreAuthorize("@ss.hasPermission('bpm:process-instance:query')")
  177 + //@PreAuthorize("@ss.hasPermission('bpm:process-instance:query')")
  178 + @PermitAll
177 179 @SuppressWarnings("unchecked")
178 180 public CommonResult<BpmApprovalDetailRespVO> getApprovalDetail(@Valid BpmApprovalDetailReqVO reqVO) {
179 181 if (StrUtil.isNotEmpty(reqVO.getProcessVariablesStr())) {
... ...
urbanops-module-bpm/src/main/java/com/zteits/urbanops/module/bpm/controller/admin/task/BpmTaskController.java
... ... @@ -20,6 +20,7 @@ import io.swagger.v3.oas.annotations.Operation;
20 20 import io.swagger.v3.oas.annotations.Parameter;
21 21 import io.swagger.v3.oas.annotations.tags.Tag;
22 22 import jakarta.annotation.Resource;
  23 +import jakarta.annotation.security.PermitAll;
23 24 import jakarta.validation.Valid;
24 25 import org.flowable.bpmn.model.UserTask;
25 26 import org.flowable.engine.history.HistoricProcessInstance;
... ... @@ -124,7 +125,8 @@ public class BpmTaskController {
124 125 @GetMapping("/list-by-process-instance-id")
125 126 @Operation(summary = "获得指定流程实例的任务列表", description = "包括完成的、未完成的")
126 127 @Parameter(name = "processInstanceId", description = "流程实例的编号", required = true)
127   - @PreAuthorize("@ss.hasPermission('bpm:task:query')")
  128 + //@PreAuthorize("@ss.hasPermission('bpm:task:query')")
  129 + @PermitAll
128 130 public CommonResult<List<BpmTaskRespVO>> getTaskListByProcessInstanceId(
129 131 @RequestParam("processInstanceId") String processInstanceId) {
130 132 List<HistoricTaskInstance> taskList = taskService.getTaskListByProcessInstanceId(processInstanceId, true);
... ...