BJ_FS / urbanops

Commit 125a348e4f3ed05c77fba9b1d93ba060ed588d84

Authored by 王彪总
1 parent 023ddf7e

feat(security): 添加查询接口的公共访问权限 

- 在部门控制器中为查询所有组织接口添加PermitAll注解
- 在道路控制器中为物联网查询道路接口添加PermitAll注解
- 允许无权限用户访问组织和道路查询功能
- 移除原有的PreAuthorize安全限制
- 保持其他安全配置不变
Inline Side-by-side
Showing 2 changed files with 4 additions and 0 deletions
urbanops-module-garden/src/main/java/com/zteits/urbanops/module/garden/controller/admin/road/RoadController.java
  View file @125a348
... ... @@ -2,6 +2,7 @@ package com.zteits.urbanops.module.garden.controller.admin.road;
2 2  
3 3 import com.zteits.urbanops.framework.security.core.util.SecurityFrameworkUtils;
4 4 import com.zteits.urbanops.module.system.api.permission.PermissionApi;
  5 +import jakarta.annotation.security.PermitAll;
5 6 import org.springframework.web.bind.annotation.*;
6 7 import jakarta.annotation.Resource;
7 8 import org.springframework.validation.annotation.Validated;
... ... @@ -124,6 +125,7 @@ public class RoadController {
124 125  
125 126 @Operation(summary = "物联网查询道路")
126 127 @GetMapping("/queryAllRoadList")
  128 + @PermitAll
127 129 public CommonResult<List<SysRoadRespVO>> queryAllRoadList(@RequestParam(required = false)String roadName,@RequestParam(required = false)String deptCode,@RequestParam(required = false)String companyCode) {
128 130 RoadListReqVO reqVO = new RoadListReqVO();
129 131 reqVO.setRoadName(roadName);
... ...
urbanops-module-system/src/main/java/com/zteits/urbanops/module/system/controller/admin/dept/DeptController.java
  View file @125a348
... ... @@ -11,6 +11,7 @@ import com.zteits.urbanops.module.system.util.tree.Dept;
11 11 import io.swagger.v3.oas.annotations.Operation;
12 12 import io.swagger.v3.oas.annotations.Parameter;
13 13 import io.swagger.v3.oas.annotations.tags.Tag;
  14 +import jakarta.annotation.security.PermitAll;
14 15 import org.springframework.security.access.prepost.PreAuthorize;
15 16 import org.springframework.validation.annotation.Validated;
16 17 import org.springframework.web.bind.annotation.*;
... ... @@ -124,6 +125,7 @@ public class DeptController {
124 125  
125 126 @Operation(summary = "查询所有组织")
126 127 @GetMapping("/queryAllDeptList")
  128 + @PermitAll
127 129 public CommonResult<List<SysDeptRespVO>> queryAllDeptList(@RequestParam(required = false)String companyCode) {
128 130 List<DeptDO> sysDepts = deptService.getSubDeptAllList();
129 131 List<SysDeptRespVO> deptResps = sysDepts.stream().map(sysDept -> {
... ...