BJ_FS / urbanops

Commit 125a348e4f3ed05c77fba9b1d93ba060ed588d84

Authored by 王彪总
1 parent 023ddf7e

feat(security): 添加查询接口的公共访问权限 

- 在部门控制器中为查询所有组织接口添加PermitAll注解
- 在道路控制器中为物联网查询道路接口添加PermitAll注解
- 允许无权限用户访问组织和道路查询功能
- 移除原有的PreAuthorize安全限制
- 保持其他安全配置不变
Inline Side-by-side
Showing 2 changed files with 4 additions and 0 deletions
urbanops-module-garden/src/main/java/com/zteits/urbanops/module/garden/controller/admin/road/RoadController.java
  View file @125a348
@@ -2,6 +2,7 @@ package com.zteits.urbanops.module.garden.controller.admin.road; @@ -2,6 +2,7 @@ package com.zteits.urbanops.module.garden.controller.admin.road;
2 2
3 import com.zteits.urbanops.framework.security.core.util.SecurityFrameworkUtils; 3 import com.zteits.urbanops.framework.security.core.util.SecurityFrameworkUtils;
4 import com.zteits.urbanops.module.system.api.permission.PermissionApi; 4 import com.zteits.urbanops.module.system.api.permission.PermissionApi;
  5 +import jakarta.annotation.security.PermitAll;
5 import org.springframework.web.bind.annotation.*; 6 import org.springframework.web.bind.annotation.*;
6 import jakarta.annotation.Resource; 7 import jakarta.annotation.Resource;
7 import org.springframework.validation.annotation.Validated; 8 import org.springframework.validation.annotation.Validated;
@@ -124,6 +125,7 @@ public class RoadController { @@ -124,6 +125,7 @@ public class RoadController {
124 125
125 @Operation(summary = "物联网查询道路") 126 @Operation(summary = "物联网查询道路")
126 @GetMapping("/queryAllRoadList") 127 @GetMapping("/queryAllRoadList")
  128 + @PermitAll
127 public CommonResult<List<SysRoadRespVO>> queryAllRoadList(@RequestParam(required = false)String roadName,@RequestParam(required = false)String deptCode,@RequestParam(required = false)String companyCode) { 129 public CommonResult<List<SysRoadRespVO>> queryAllRoadList(@RequestParam(required = false)String roadName,@RequestParam(required = false)String deptCode,@RequestParam(required = false)String companyCode) {
128 RoadListReqVO reqVO = new RoadListReqVO(); 130 RoadListReqVO reqVO = new RoadListReqVO();
129 reqVO.setRoadName(roadName); 131 reqVO.setRoadName(roadName);
urbanops-module-system/src/main/java/com/zteits/urbanops/module/system/controller/admin/dept/DeptController.java
  View file @125a348
@@ -11,6 +11,7 @@ import com.zteits.urbanops.module.system.util.tree.Dept; @@ -11,6 +11,7 @@ import com.zteits.urbanops.module.system.util.tree.Dept;
11 import io.swagger.v3.oas.annotations.Operation; 11 import io.swagger.v3.oas.annotations.Operation;
12 import io.swagger.v3.oas.annotations.Parameter; 12 import io.swagger.v3.oas.annotations.Parameter;
13 import io.swagger.v3.oas.annotations.tags.Tag; 13 import io.swagger.v3.oas.annotations.tags.Tag;
  14 +import jakarta.annotation.security.PermitAll;
14 import org.springframework.security.access.prepost.PreAuthorize; 15 import org.springframework.security.access.prepost.PreAuthorize;
15 import org.springframework.validation.annotation.Validated; 16 import org.springframework.validation.annotation.Validated;
16 import org.springframework.web.bind.annotation.*; 17 import org.springframework.web.bind.annotation.*;
@@ -124,6 +125,7 @@ public class DeptController { @@ -124,6 +125,7 @@ public class DeptController {
124 125
125 @Operation(summary = "查询所有组织") 126 @Operation(summary = "查询所有组织")
126 @GetMapping("/queryAllDeptList") 127 @GetMapping("/queryAllDeptList")
  128 + @PermitAll
127 public CommonResult<List<SysDeptRespVO>> queryAllDeptList(@RequestParam(required = false)String companyCode) { 129 public CommonResult<List<SysDeptRespVO>> queryAllDeptList(@RequestParam(required = false)String companyCode) {
128 List<DeptDO> sysDepts = deptService.getSubDeptAllList(); 130 List<DeptDO> sysDepts = deptService.getSubDeptAllList();
129 List<SysDeptRespVO> deptResps = sysDepts.stream().map(sysDept -> { 131 List<SysDeptRespVO> deptResps = sysDepts.stream().map(sysDept -> {