tuqin
2026-10-28 f4af3fbde83f305f4f1c96154aaa95944ecd8276
yudao-module-hrm/src/main/java/cn/iocoder/yudao/module/hrm/service/salary/HrmSalaryCalculationServiceImpl.java
@@ -114,6 +114,27 @@
    }
    @Override
    public PageResult<HrmSalaryCalculationDO> getMySalaryCalculationPage(Long userId, HrmSalaryCalculationPageReqVO pageReqVO) {
        // 强制限定为当前登录人:忽略前端传入的 userId / deptId,防止越权查看他人工资
        pageReqVO.setUserId(userId);
        pageReqVO.setDeptId(null);
        return salaryCalculationMapper.selectPage(pageReqVO);
    }
    @Override
    public HrmSalaryCalculationDO getMySalaryCalculation(Long id, Long userId) {
        HrmSalaryCalculationDO calculation = salaryCalculationMapper.selectById(id);
        if (calculation == null) {
            return null;
        }
        // 不属于本人的记录一律视为不存在,避免通过猜 id 越权查看他人工资
        if (!java.util.Objects.equals(calculation.getUserId(), userId)) {
            return null;
        }
        return calculation;
    }
    @Override
    public HrmSalaryCalculationDO getSalaryCalculation(Long id) {
        return salaryCalculationMapper.selectById(id);
    }