fix

play-admin/src/main/java/com/starry/admin/modules/custom/controller/PlayCustomLeaveMsgController.java

@@ -8,6 +8,7 @@ import com.starry.admin.modules.custom.service.IPlayCustomLeaveMsgService;
 import com.starry.common.annotation.Log;
 import com.starry.common.enums.BusinessType;
 import com.starry.common.result.R;
+import org.springframework.security.access.prepost.PreAuthorize;
 import org.springframework.validation.annotation.Validated;
 import org.springframework.web.bind.annotation.*;
 
@@ -28,6 +29,7 @@ public class PlayCustomLeaveMsgController {
     /**
      * 分页查询顾客留言列表
      */
+    @PreAuthorize("@customSs.hasPermission('custom:leave:list')")
     @PostMapping("/listByPage")
     public R list(@Validated @RequestBody PlayCustomLeaveMsgQueryVo vo) {
         IPage<PlayCustomLeaveMsgReturnVo> list = playCustomLeaveMsgService.selectByPage(vo);
@@ -37,6 +39,7 @@ public class PlayCustomLeaveMsgController {
     /**
      * 获取顾客留言详细信息
      */
+    @PreAuthorize("@customSs.hasPermission('custom:leave:list')")
     @GetMapping(value = "/{id}")
     public R getInfo(@PathVariable("id") String id) {
         return R.ok(playCustomLeaveMsgService.selectPlayCustomLeaveMsgById(id));
@@ -45,6 +48,7 @@ public class PlayCustomLeaveMsgController {
     /**
      * 新增顾客留言
      */
+    @PreAuthorize("@customSs.hasPermission('custom:leave:add')")
     @Log(title = "顾客留言", businessType = BusinessType.INSERT)
     @PostMapping("/create")
     public R create(@RequestBody PlayCustomLeaveMsgEntity playCustomLeaveMsg) {
@@ -58,6 +62,7 @@ public class PlayCustomLeaveMsgController {
     /**
      * 修改顾客留言
      */
+    @PreAuthorize("@customSs.hasPermission('custom:leave:update')")
     @Log(title = "顾客留言", businessType = BusinessType.UPDATE)
     @PostMapping(value = "/update/{id}")
     public R update(@PathVariable String id, @RequestBody PlayCustomLeaveMsgEntity playCustomLeaveMsg) {
@@ -72,6 +77,7 @@ public class PlayCustomLeaveMsgController {
     /**
      * 删除顾客留言
      */
+    @PreAuthorize("@customSs.hasPermission('custom:leave:delete')")
     @Log(title = "顾客留言", businessType = BusinessType.DELETE)
     @DeleteMapping("/{ids}")
     public R remove(@PathVariable String[] ids) {

play-admin/src/main/java/com/starry/admin/modules/custom/controller/PlayCustomLevelInfoController.java

@@ -10,6 +10,7 @@ import com.starry.common.annotation.Log;
 import com.starry.common.enums.BusinessType;
 import com.starry.common.result.R;
 import com.starry.common.utils.ConvertUtil;
+import org.springframework.security.access.prepost.PreAuthorize;
 import org.springframework.web.bind.annotation.*;
 
 import javax.annotation.Resource;
@@ -30,6 +31,7 @@ public class PlayCustomLevelInfoController {
     /**
      * 查询顾客等级列表
      */
+    @PreAuthorize("@customSs.hasPermission('custom:level:list')")
     @PostMapping("/listAll")
     public R listAll() {
         List<PlayCustomLevelInfoEntity> list = playCustomLevelInfoService.selectPlayCustomLevelInfoByPage();
@@ -39,6 +41,7 @@ public class PlayCustomLevelInfoController {
     /**
      * 获取顾客等级详细信息
      */
+    @PreAuthorize("@customSs.hasPermission('custom:level:list')")
     @GetMapping(value = "/{id}")
     public R getInfo(@PathVariable("id") String id) {
         return R.ok(playCustomLevelInfoService.selectPlayCustomLevelInfoById(id));
@@ -48,6 +51,7 @@ public class PlayCustomLevelInfoController {
     /**
      * 新增顾客等级
      */
+    @PreAuthorize("@customSs.hasPermission('custom:level:add')")
     @Log(title = "店员等级", businessType = BusinessType.INSERT)
     @PostMapping("/create")
     public R create(@RequestBody PlayCustomLevelAddVo vo) {
@@ -65,6 +69,7 @@ public class PlayCustomLevelInfoController {
     /**
      * 修改顾客等级
      */
+    @PreAuthorize("@customSs.hasPermission('custom:level:update')")
     @Log(title = "顾客等级", businessType = BusinessType.UPDATE)
     @PostMapping(value = "/update")
     public R update(@RequestBody PlayCustomLevelEditVo vo) {

play-admin/src/main/java/com/starry/admin/modules/custom/controller/PlayCustomUserInfoController.java

@@ -10,6 +10,7 @@ import com.starry.common.annotation.Log;
 import com.starry.common.enums.BusinessType;
 import com.starry.common.result.R;
 import com.starry.common.utils.ConvertUtil;
+import org.springframework.security.access.prepost.PreAuthorize;
 import org.springframework.validation.annotation.Validated;
 import org.springframework.web.bind.annotation.*;
 
@@ -30,6 +31,7 @@ public class PlayCustomUserInfoController {
     /**
      * 查询顾客列表
      */
+    @PreAuthorize("@customSs.hasPermission('custom:user:list')")
     @PostMapping("/listByPage")
     public R list(@Validated @RequestBody PlayCustomUserQueryVo vo) {
         IPage<PlayCustomUserReturnVo> list = playCustomUserInfoService.selectByPage(vo);
@@ -39,6 +41,7 @@ public class PlayCustomUserInfoController {
     /**
      * 获取顾客详细信息
      */
+    @PreAuthorize("@customSs.hasPermission('custom:user:list')")
     @GetMapping(value = "/{id}")
     public R getInfo(@PathVariable("id") String id) {
         return R.ok(playCustomUserInfoService.selectById(id));
@@ -47,6 +50,7 @@ public class PlayCustomUserInfoController {
     /**
      * 新增顾客
      */
+    @PreAuthorize("@customSs.hasPermission('custom:user:add')")
     @Log(title = "顾客", businessType = BusinessType.INSERT)
     @PostMapping("/create")
     public R create(@RequestBody PlayCustomUserInfoEntity playCustomUserInfo) {
@@ -60,6 +64,7 @@ public class PlayCustomUserInfoController {
     /**
      * 修改顾客状态
      */
+    @PreAuthorize("@customSs.hasPermission('custom:user:update')")
     @Log(title = "顾客", businessType = BusinessType.UPDATE)
     @PostMapping(value = "/updateState")
     public R updateState(@Validated @RequestBody PlayCustomUserStateEditVo vo) {
@@ -74,6 +79,7 @@ public class PlayCustomUserInfoController {
     /**
      * 修改顾客
      */
+    @PreAuthorize("@customSs.hasPermission('custom:user:update')")
     @Log(title = "顾客", businessType = BusinessType.UPDATE)
     @PostMapping(value = "/update/{id}")
     public R update(@PathVariable String id, @RequestBody PlayCustomUserInfoEntity playCustomUserInfo) {
@@ -88,6 +94,7 @@ public class PlayCustomUserInfoController {
     /**
      * 删除顾客
      */
+    @PreAuthorize("@customSs.hasPermission('custom:user:delete')")
     @Log(title = "顾客", businessType = BusinessType.DELETE)
     @DeleteMapping("/{ids}")
     public R remove(@PathVariable String[] ids) {