|
@@ -1,5 +1,9 @@
|
|
|
package com.ym.mec.web.controller;
|
|
|
|
|
|
+import com.ym.mec.auth.api.client.SysUserFeignService;
|
|
|
+import com.ym.mec.auth.api.entity.SysUser;
|
|
|
+import com.ym.mec.biz.dal.dao.EmployeeDao;
|
|
|
+import com.ym.mec.biz.dal.entity.Employee;
|
|
|
import com.ym.mec.biz.dal.entity.School;
|
|
|
import com.ym.mec.biz.dal.page.SchoolQueryInfo;
|
|
|
import com.ym.mec.biz.service.SchoolService;
|
|
@@ -7,11 +11,14 @@ import com.ym.mec.common.controller.BaseController;
|
|
|
import io.swagger.annotations.Api;
|
|
|
import io.swagger.annotations.ApiOperation;
|
|
|
import io.swagger.annotations.ApiParam;
|
|
|
+import org.apache.commons.lang3.StringUtils;
|
|
|
import org.springframework.beans.factory.annotation.Autowired;
|
|
|
import org.springframework.security.access.prepost.PreAuthorize;
|
|
|
import org.springframework.web.bind.annotation.*;
|
|
|
|
|
|
+import java.util.Arrays;
|
|
|
import java.util.Date;
|
|
|
+import java.util.List;
|
|
|
|
|
|
@RequestMapping("school")
|
|
|
@Api(tags = "学校(教学点)服务")
|
|
@@ -20,6 +27,10 @@ public class SchoolController extends BaseController {
|
|
|
|
|
|
@Autowired
|
|
|
private SchoolService schoolService;
|
|
|
+ @Autowired
|
|
|
+ private EmployeeDao employeeDao;
|
|
|
+ @Autowired
|
|
|
+ private SysUserFeignService sysUserFeignService;
|
|
|
|
|
|
@ApiOperation(value = "新增学校")
|
|
|
@PostMapping("/add")
|
|
@@ -63,7 +74,24 @@ public class SchoolController extends BaseController {
|
|
|
@ApiOperation(value = "根据机构编号获取学校列表")
|
|
|
@GetMapping("/queryByOrganId")
|
|
|
@PreAuthorize("@pcs.hasPermissions('school/queryByOrganId')")
|
|
|
- public Object queryByOrganId(@RequestParam Integer organId){
|
|
|
+ public Object queryByOrganId(String organId){
|
|
|
+ SysUser sysUser = sysUserFeignService.queryUserInfo();
|
|
|
+ if (sysUser == null) {
|
|
|
+ return failed("用户信息获取失败");
|
|
|
+ }
|
|
|
+ if(!sysUser.getIsSuperAdmin()){
|
|
|
+ Employee employee = employeeDao.get(sysUser.getId());
|
|
|
+ if (StringUtils.isEmpty(organId)) {
|
|
|
+ organId = employee.getOrganIdList();
|
|
|
+ }else if(StringUtils.isEmpty(employee.getOrganIdList())){
|
|
|
+ return failed("用户所在分部异常");
|
|
|
+ }else {
|
|
|
+ List<String> list = Arrays.asList(employee.getOrganIdList().split(","));
|
|
|
+ if(!list.containsAll(Arrays.asList(organId.split(",")))){
|
|
|
+ return failed("非法请求");
|
|
|
+ }
|
|
|
+ }
|
|
|
+ }
|
|
|
return succeed(schoolService.queryByOrganId(organId));
|
|
|
}
|
|
|
|