限制用户操作数据权限范围

RuoYi

2024-05-29 4b699cd34c729f36a6ad4bb9ddcc0520c4bf3e61

 src/main/java/com/ruoyi/framework/config/SecurityConfig.java

@@ -98,7 +98,7 @@
        // 注解标记允许匿名访问的url

        ExpressionUrlAuthorizationConfigurer<HttpSecurity>.ExpressionInterceptUrlRegistry registry = httpSecurity.authorizeRequests();

        permitAllUrl.getUrls().forEach(url -> registry.antMatchers(url).permitAll());

 


        httpSecurity

                // CSRF禁用，因为不使用session

                .csrf().disable()