Examples with SaCheckPermission cn.dev33.satoken.annotation.SaCheckPermission used on opensource projects

Example 1 with SaCheckPermission

use of cn.dev33.satoken.annotation.SaCheckPermission in project RuoYi-Flowable-Plus by KonBAI-Q.

the class SysRoleController method edit.

/**
 * 修改保存角色
 */
@ApiOperation("修改保存角色")
@SaCheckPermission("system:role:edit")
@Log(title = "角色管理", businessType = BusinessType.UPDATE)
@PutMapping
public R<Void> edit(@Validated @RequestBody SysRole role) {
    roleService.checkRoleAllowed(role);
    roleService.checkRoleDataScope(role.getRoleId());
    if (UserConstants.NOT_UNIQUE.equals(roleService.checkRoleNameUnique(role))) {
        return R.fail("修改角色'" + role.getRoleName() + "'失败，角色名称已存在");
    } else if (UserConstants.NOT_UNIQUE.equals(roleService.checkRoleKeyUnique(role))) {
        return R.fail("修改角色'" + role.getRoleName() + "'失败，角色权限已存在");
    }
    if (roleService.updateRole(role) > 0) {
        // 更新缓存用户权限
        LoginUser loginUser = getLoginUser();
        SysUser sysUser = userService.selectUserById(loginUser.getUserId());
        if (ObjectUtil.isNotNull(sysUser) && !sysUser.isAdmin()) {
            loginUser.setMenuPermission(permissionService.getMenuPermission(sysUser));
            LoginHelper.setLoginUser(loginUser);
        }
        return R.ok();
    }
    return R.fail("修改角色'" + role.getRoleName() + "'失败，请联系管理员");
}

Example 2 with SaCheckPermission

use of cn.dev33.satoken.annotation.SaCheckPermission in project RuoYi-Flowable-Plus by KonBAI-Q.

the class SysUserController method getInfo.

/**
 * 根据用户编号获取详细信息
 */
@ApiOperation("根据用户编号获取详细信息")
@SaCheckPermission("system:user:query")
@GetMapping(value = { "/", "/{userId}" })
public R<Map<String, Object>> getInfo(@ApiParam("用户ID") @PathVariable(value = "userId", required = false) Long userId) {
    userService.checkUserDataScope(userId);
    Map<String, Object> ajax = new HashMap<>();
    List<SysRole> roles = roleService.selectRoleAll();
    ajax.put("roles", LoginHelper.isAdmin(userId) ? roles : roles.stream().filter(r -> !r.isAdmin()).collect(Collectors.toList()));
    ajax.put("posts", postService.selectPostAll());
    if (ObjectUtil.isNotNull(userId)) {
        SysUser sysUser = userService.selectUserById(userId);
        ajax.put("user", sysUser);
        ajax.put("postIds", postService.selectPostListByUserId(userId));
        ajax.put("roleIds", sysUser.getRoles().stream().map(SysRole::getRoleId).collect(Collectors.toList()));
    }
    return R.ok(ajax);
}

Example 3 with SaCheckPermission

use of cn.dev33.satoken.annotation.SaCheckPermission in project RuoYi-Flowable-Plus by KonBAI-Q.

the class SysUserController method authRole.

/**
 * 根据用户编号获取授权角色
 */
@ApiOperation("根据用户编号获取授权角色")
@SaCheckPermission("system:user:query")
@GetMapping("/authRole/{userId}")
public R<Map<String, Object>> authRole(@ApiParam("用户ID") @PathVariable("userId") Long userId) {
    SysUser user = userService.selectUserById(userId);
    List<SysRole> roles = roleService.selectRolesByUserId(userId);
    Map<String, Object> ajax = new HashMap<>();
    ajax.put("user", user);
    ajax.put("roles", LoginHelper.isAdmin(userId) ? roles : roles.stream().filter(r -> !r.isAdmin()).collect(Collectors.toList()));
    return R.ok(ajax);
}

Example 4 with SaCheckPermission

use of cn.dev33.satoken.annotation.SaCheckPermission in project RuoYi-Flowable-Plus by KonBAI-Q.

the class SysDeptController method excludeChild.

/**
 * 查询部门列表（排除节点）
 */
@ApiOperation("查询部门列表（排除节点）")
@SaCheckPermission("system:dept:list")
@GetMapping("/list/exclude/{deptId}")
public R<List<SysDept>> excludeChild(@ApiParam("部门ID") @PathVariable(value = "deptId", required = false) Long deptId) {
    List<SysDept> depts = deptService.selectDeptList(new SysDept());
    depts.removeIf(d -> d.getDeptId().equals(deptId) || ArrayUtil.contains(StringUtils.split(d.getAncestors(), ","), deptId + ""));
    return R.ok(depts);
}

Example 5 with SaCheckPermission

use of cn.dev33.satoken.annotation.SaCheckPermission in project RuoYi-Flowable-Plus by KonBAI-Q.

the class GenController method getInfo.

/**
 * 修改代码生成业务
 */
@ApiOperation("修改代码生成业务")
@SaCheckPermission("tool:gen:query")
@GetMapping(value = "/{tableId}")
public R<Map<String, Object>> getInfo(@PathVariable Long tableId) {
    GenTable table = genTableService.selectGenTableById(tableId);
    List<GenTable> tables = genTableService.selectGenTableAll();
    List<GenTableColumn> list = genTableService.selectGenTableColumnListByTableId(tableId);
    Map<String, Object> map = new HashMap<String, Object>();
    map.put("info", table);
    map.put("rows", list);
    map.put("tables", tables);
    return R.ok(map);
}