浏览代码

getObject 权限问题

shiqian 4 年之前
父节点
当前提交
43e811ecb0
共有 1 个文件被更改,包括 9 次插入0 次删除
  1. 9 0
      boman-web-core/src/main/java/com/boman/web/core/service/TableServiceCmdService.java

+ 9 - 0
boman-web-core/src/main/java/com/boman/web/core/service/TableServiceCmdService.java

@@ -15,6 +15,7 @@ import com.boman.domain.GenTableColumn;
 import com.boman.domain.SysDictData;
 import com.boman.domain.SysDictData;
 import com.boman.domain.constant.*;
 import com.boman.domain.constant.*;
 import com.boman.domain.dto.RoleMenuDto;
 import com.boman.domain.dto.RoleMenuDto;
+import com.boman.domain.exception.NoSuchFunctionException;
 import com.boman.gen.api.RemoteGenTableColumnService;
 import com.boman.gen.api.RemoteGenTableColumnService;
 import com.boman.gen.api.RemoteGenTableService;
 import com.boman.gen.api.RemoteGenTableService;
 import com.boman.system.api.RemoteMenuService;
 import com.boman.system.api.RemoteMenuService;
@@ -253,6 +254,9 @@ public class TableServiceCmdService {
         handleDictForQueryList(result, columns);
         handleDictForQueryList(result, columns);
         handleDateTimeForQueryList(result, columns);
         handleDateTimeForQueryList(result, columns);
         handleFkForQueryList(result, columns);
         handleFkForQueryList(result, columns);
+        // 需要计算的列
+        handleCalc(result, columns);
+
         // 定制接口
         // 定制接口
         result = isCustomized(dto.getTable(), result, "trigger_retrieve");
         result = isCustomized(dto.getTable(), result, "trigger_retrieve");
 
 
@@ -274,6 +278,11 @@ public class TableServiceCmdService {
 
 
         GenTable genTable = getTableFromRedisByTableName(RedisKey.TABLE_INFO, tableName);
         GenTable genTable = getTableFromRedisByTableName(RedisKey.TABLE_INFO, tableName);
         List<GenTableColumn> columns = genTable.getColumns();
         List<GenTableColumn> columns = genTable.getColumns();
+
+        if (BooleanUtils.isFalse(checkAuthGetObject(genTable, id))) {
+            throw new NoSuchFunctionException("不好意思,您无权限操作");
+        }
+
         // id = -1时,查询该表单对应的字段名称
         // id = -1时,查询该表单对应的字段名称
         if (ltZero(id)) {
         if (ltZero(id)) {
             return getByTableName(genTable, isUi);
             return getByTableName(genTable, isUi);