Commit 01875185a63cea32c90ead3eac002baf1dd74a42

Authored by wangqian
1 parent 49fa8076

工作流查询接口权限屏蔽

urbanops-module-bpm/src/main/java/com/zteits/urbanops/module/bpm/controller/admin/task/BpmProcessInstanceController.java
@@ -23,6 +23,7 @@ import io.swagger.v3.oas.annotations.Operation; @@ -23,6 +23,7 @@ import io.swagger.v3.oas.annotations.Operation;
23 import io.swagger.v3.oas.annotations.Parameter; 23 import io.swagger.v3.oas.annotations.Parameter;
24 import io.swagger.v3.oas.annotations.tags.Tag; 24 import io.swagger.v3.oas.annotations.tags.Tag;
25 import jakarta.annotation.Resource; 25 import jakarta.annotation.Resource;
  26 +import jakarta.annotation.security.PermitAll;
26 import jakarta.validation.Valid; 27 import jakarta.validation.Valid;
27 import org.flowable.engine.history.HistoricProcessInstance; 28 import org.flowable.engine.history.HistoricProcessInstance;
28 import org.flowable.engine.repository.ProcessDefinition; 29 import org.flowable.engine.repository.ProcessDefinition;
@@ -173,7 +174,8 @@ public class BpmProcessInstanceController { @@ -173,7 +174,8 @@ public class BpmProcessInstanceController {
173 @GetMapping("/get-approval-detail") 174 @GetMapping("/get-approval-detail")
174 @Operation(summary = "获得审批详情") 175 @Operation(summary = "获得审批详情")
175 @Parameter(name = "id", description = "流程实例的编号", required = true) 176 @Parameter(name = "id", description = "流程实例的编号", required = true)
176 - @PreAuthorize("@ss.hasPermission('bpm:process-instance:query')") 177 + //@PreAuthorize("@ss.hasPermission('bpm:process-instance:query')")
  178 + @PermitAll
177 @SuppressWarnings("unchecked") 179 @SuppressWarnings("unchecked")
178 public CommonResult<BpmApprovalDetailRespVO> getApprovalDetail(@Valid BpmApprovalDetailReqVO reqVO) { 180 public CommonResult<BpmApprovalDetailRespVO> getApprovalDetail(@Valid BpmApprovalDetailReqVO reqVO) {
179 if (StrUtil.isNotEmpty(reqVO.getProcessVariablesStr())) { 181 if (StrUtil.isNotEmpty(reqVO.getProcessVariablesStr())) {
urbanops-module-bpm/src/main/java/com/zteits/urbanops/module/bpm/controller/admin/task/BpmTaskController.java
@@ -20,6 +20,7 @@ import io.swagger.v3.oas.annotations.Operation; @@ -20,6 +20,7 @@ import io.swagger.v3.oas.annotations.Operation;
20 import io.swagger.v3.oas.annotations.Parameter; 20 import io.swagger.v3.oas.annotations.Parameter;
21 import io.swagger.v3.oas.annotations.tags.Tag; 21 import io.swagger.v3.oas.annotations.tags.Tag;
22 import jakarta.annotation.Resource; 22 import jakarta.annotation.Resource;
  23 +import jakarta.annotation.security.PermitAll;
23 import jakarta.validation.Valid; 24 import jakarta.validation.Valid;
24 import org.flowable.bpmn.model.UserTask; 25 import org.flowable.bpmn.model.UserTask;
25 import org.flowable.engine.history.HistoricProcessInstance; 26 import org.flowable.engine.history.HistoricProcessInstance;
@@ -124,7 +125,8 @@ public class BpmTaskController { @@ -124,7 +125,8 @@ public class BpmTaskController {
124 @GetMapping("/list-by-process-instance-id") 125 @GetMapping("/list-by-process-instance-id")
125 @Operation(summary = "获得指定流程实例的任务列表", description = "包括完成的、未完成的") 126 @Operation(summary = "获得指定流程实例的任务列表", description = "包括完成的、未完成的")
126 @Parameter(name = "processInstanceId", description = "流程实例的编号", required = true) 127 @Parameter(name = "processInstanceId", description = "流程实例的编号", required = true)
127 - @PreAuthorize("@ss.hasPermission('bpm:task:query')") 128 + //@PreAuthorize("@ss.hasPermission('bpm:task:query')")
  129 + @PermitAll
128 public CommonResult<List<BpmTaskRespVO>> getTaskListByProcessInstanceId( 130 public CommonResult<List<BpmTaskRespVO>> getTaskListByProcessInstanceId(
129 @RequestParam("processInstanceId") String processInstanceId) { 131 @RequestParam("processInstanceId") String processInstanceId) {
130 List<HistoricTaskInstance> taskList = taskService.getTaskListByProcessInstanceId(processInstanceId, true); 132 List<HistoricTaskInstance> taskList = taskService.getTaskListByProcessInstanceId(processInstanceId, true);