admin/lx-admin-backend
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

update 优化 权限获取 增加用户登录了但是查询的loginId是别人的场景

Browse Source
This commit is contained in:
疯狂的狮子Li 2025-05-26 16:31:10 +08:00
parent a7ea096319
commit d1889c42a3
1 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
ruoyi-common/ruoyi-common-satoken/src/main/java/org/dromara/common/satoken/core/service/SaPermissionImpl.java
View File

@ -28,7 +28,7 @@ public class SaPermissionImpl implements StpInterface {
@Override @Override
public List<String> getPermissionList(Object loginId, String loginType) { public List<String> getPermissionList(Object loginId, String loginType) {
LoginUser loginUser = LoginHelper.getLoginUser(); LoginUser loginUser = LoginHelper.getLoginUser();
if (ObjectUtil.isNull(loginUser)) { if (ObjectUtil.isNull(loginUser) || !loginUser.getLoginId().equals(loginId)) {
List<String> list = StringUtils.splitList(loginId.toString(), ":"); List<String> list = StringUtils.splitList(loginId.toString(), ":");
return new ArrayList<>(permissionService.getMenuPermission(Long.parseLong(list.get(1)))); return new ArrayList<>(permissionService.getMenuPermission(Long.parseLong(list.get(1))));
} }
@ -46,7 +46,7 @@ public class SaPermissionImpl implements StpInterface {
@Override @Override
public List<String> getRoleList(Object loginId, String loginType) { public List<String> getRoleList(Object loginId, String loginType) {
LoginUser loginUser = LoginHelper.getLoginUser(); LoginUser loginUser = LoginHelper.getLoginUser();
if (ObjectUtil.isNull(loginUser)) { if (ObjectUtil.isNull(loginUser) || !loginUser.getLoginId().equals(loginId)) {
List<String> list = StringUtils.splitList(loginId.toString(), ":"); List<String> list = StringUtils.splitList(loginId.toString(), ":");
return new ArrayList<>(permissionService.getRolePermission(Long.parseLong(list.get(1)))); return new ArrayList<>(permissionService.getRolePermission(Long.parseLong(list.get(1))));
} }