| | |
| | | } |
| | | |
| | | @Override |
| | | public PageResult<HrmSalaryCalculationDO> getMySalaryCalculationPage(Long userId, HrmSalaryCalculationPageReqVO pageReqVO) { |
| | | // 强制限定为当前登录人:忽略前端传入的 userId / deptId,防止越权查看他人工资 |
| | | pageReqVO.setUserId(userId); |
| | | pageReqVO.setDeptId(null); |
| | | return salaryCalculationMapper.selectPage(pageReqVO); |
| | | } |
| | | |
| | | @Override |
| | | public HrmSalaryCalculationDO getMySalaryCalculation(Long id, Long userId) { |
| | | HrmSalaryCalculationDO calculation = salaryCalculationMapper.selectById(id); |
| | | if (calculation == null) { |
| | | return null; |
| | | } |
| | | // 不属于本人的记录一律视为不存在,避免通过猜 id 越权查看他人工资 |
| | | if (!java.util.Objects.equals(calculation.getUserId(), userId)) { |
| | | return null; |
| | | } |
| | | return calculation; |
| | | } |
| | | |
| | | @Override |
| | | public HrmSalaryCalculationDO getSalaryCalculation(Long id) { |
| | | return salaryCalculationMapper.selectById(id); |
| | | } |