|  | @@ -1,5 +1,9 @@
 | 
	
		
			
				|  |  |  package com.ym.mec.web.controller;
 | 
	
		
			
				|  |  |  
 | 
	
		
			
				|  |  | +import com.ym.mec.auth.api.client.SysUserFeignService;
 | 
	
		
			
				|  |  | +import com.ym.mec.auth.api.entity.SysUser;
 | 
	
		
			
				|  |  | +import com.ym.mec.biz.dal.dao.EmployeeDao;
 | 
	
		
			
				|  |  | +import com.ym.mec.biz.dal.entity.Employee;
 | 
	
		
			
				|  |  |  import com.ym.mec.biz.dal.entity.School;
 | 
	
		
			
				|  |  |  import com.ym.mec.biz.dal.page.SchoolQueryInfo;
 | 
	
		
			
				|  |  |  import com.ym.mec.biz.service.SchoolService;
 | 
	
	
		
			
				|  | @@ -7,11 +11,14 @@ import com.ym.mec.common.controller.BaseController;
 | 
	
		
			
				|  |  |  import io.swagger.annotations.Api;
 | 
	
		
			
				|  |  |  import io.swagger.annotations.ApiOperation;
 | 
	
		
			
				|  |  |  import io.swagger.annotations.ApiParam;
 | 
	
		
			
				|  |  | +import org.apache.commons.lang3.StringUtils;
 | 
	
		
			
				|  |  |  import org.springframework.beans.factory.annotation.Autowired;
 | 
	
		
			
				|  |  |  import org.springframework.security.access.prepost.PreAuthorize;
 | 
	
		
			
				|  |  |  import org.springframework.web.bind.annotation.*;
 | 
	
		
			
				|  |  |  
 | 
	
		
			
				|  |  | +import java.util.Arrays;
 | 
	
		
			
				|  |  |  import java.util.Date;
 | 
	
		
			
				|  |  | +import java.util.List;
 | 
	
		
			
				|  |  |  
 | 
	
		
			
				|  |  |  @RequestMapping("school")
 | 
	
		
			
				|  |  |  @Api(tags = "学校(教学点)服务")
 | 
	
	
		
			
				|  | @@ -20,6 +27,10 @@ public class SchoolController extends BaseController {
 | 
	
		
			
				|  |  |  
 | 
	
		
			
				|  |  |      @Autowired
 | 
	
		
			
				|  |  |      private SchoolService schoolService;
 | 
	
		
			
				|  |  | +    @Autowired
 | 
	
		
			
				|  |  | +    private EmployeeDao employeeDao;
 | 
	
		
			
				|  |  | +    @Autowired
 | 
	
		
			
				|  |  | +    private SysUserFeignService sysUserFeignService;
 | 
	
		
			
				|  |  |  
 | 
	
		
			
				|  |  |      @ApiOperation(value = "新增学校")
 | 
	
		
			
				|  |  |      @PostMapping("/add")
 | 
	
	
		
			
				|  | @@ -63,7 +74,24 @@ public class SchoolController extends BaseController {
 | 
	
		
			
				|  |  |      @ApiOperation(value = "根据机构编号获取学校列表")
 | 
	
		
			
				|  |  |      @GetMapping("/queryByOrganId")
 | 
	
		
			
				|  |  |      @PreAuthorize("@pcs.hasPermissions('school/queryByOrganId')")
 | 
	
		
			
				|  |  | -    public Object queryByOrganId(@RequestParam Integer organId){
 | 
	
		
			
				|  |  | +    public Object queryByOrganId(String organId){
 | 
	
		
			
				|  |  | +        SysUser sysUser = sysUserFeignService.queryUserInfo();
 | 
	
		
			
				|  |  | +        if (sysUser == null) {
 | 
	
		
			
				|  |  | +            return failed("用户信息获取失败");
 | 
	
		
			
				|  |  | +        }
 | 
	
		
			
				|  |  | +        if(!sysUser.getIsSuperAdmin()){
 | 
	
		
			
				|  |  | +            Employee employee = employeeDao.get(sysUser.getId());
 | 
	
		
			
				|  |  | +            if (StringUtils.isEmpty(organId)) {
 | 
	
		
			
				|  |  | +                organId = employee.getOrganIdList();
 | 
	
		
			
				|  |  | +            }else if(StringUtils.isEmpty(employee.getOrganIdList())){
 | 
	
		
			
				|  |  | +                return failed("用户所在分部异常");
 | 
	
		
			
				|  |  | +            }else {
 | 
	
		
			
				|  |  | +                List<String> list = Arrays.asList(employee.getOrganIdList().split(","));
 | 
	
		
			
				|  |  | +                if(!list.containsAll(Arrays.asList(organId.split(",")))){
 | 
	
		
			
				|  |  | +                    return failed("非法请求");
 | 
	
		
			
				|  |  | +                }
 | 
	
		
			
				|  |  | +            }
 | 
	
		
			
				|  |  | +        }
 | 
	
		
			
				|  |  |          return succeed(schoolService.queryByOrganId(organId));
 | 
	
		
			
				|  |  |      }
 | 
	
		
			
				|  |  |  
 |