学生课程列表接口修改

mec-web/src/main/java/com/ym/mec/web/controller/CourseReviewController.java

@@ -37,25 +37,25 @@ public class CourseReviewController extends BaseController {
 
     @ApiOperation(value = "网管课课程评论管理")
     @GetMapping("getPracticeGroup")
-    //@PreAuthorize("@pcs.hasPermissions('courseReview/getPracticeGroup')")
+    @PreAuthorize("@pcs.hasPermissions('courseReview/getPracticeGroup')")
     public Object getPracticeGroup(CourseReviewQueryInfo queryInfo) {
-//        SysUser sysUser = sysUserFeignService.queryUserInfo();
-//        if (sysUser == null) {
-//            return failed("用户信息获取失败");
-//        }
-//        if (!sysUser.getIsSuperAdmin()) {
-//            Employee employee = employeeDao.get(sysUser.getId());
-//            if (StringUtils.isEmpty(queryInfo.getOrganId())) {
-//                queryInfo.setOrganId(employee.getOrganIdList());
-//            } else if (StringUtils.isEmpty(employee.getOrganIdList())) {
-//                return failed("用户所在分部异常");
-//            } else {
-//                List<String> list = Arrays.asList(employee.getOrganIdList().split(","));
-//                if (!list.containsAll(Arrays.asList(queryInfo.getOrganId().split(",")))) {
-//                    return failed("非法请求");
-//                }
-//            }
-//        }
+        SysUser sysUser = sysUserFeignService.queryUserInfo();
+        if (sysUser == null) {
+            return failed("用户信息获取失败");
+        }
+        if (!sysUser.getIsSuperAdmin()) {
+            Employee employee = employeeDao.get(sysUser.getId());
+            if (StringUtils.isEmpty(queryInfo.getOrganId())) {
+                queryInfo.setOrganId(employee.getOrganIdList());
+            } else if (StringUtils.isEmpty(employee.getOrganIdList())) {
+                return failed("用户所在分部异常");
+            } else {
+                List<String> list = Arrays.asList(employee.getOrganIdList().split(","));
+                if (!list.containsAll(Arrays.asList(queryInfo.getOrganId().split(",")))) {
+                    return failed("非法请求");
+                }
+            }
+        }
         return succeed(courseReviewService.findPracticeGroupReviews(queryInfo));
     }