用户访问控制时校验数据权限，防止越权

RuoYi

2022-01-27 b49cdbbc9516352d1f4511e4223fa9d089b057b9

 src/main/java/com/ruoyi/project/tool/gen/controller/GenController.java

@@ -63,10 +63,12 @@
    public AjaxResult getInfo(@PathVariable Long talbleId)

    {

        GenTable table = genTableService.selectGenTableById(talbleId);

        List<GenTable> tables = genTableService.selectGenTableAll();

        List<GenTableColumn> list = genTableColumnService.selectGenTableColumnListByTableId(talbleId);

        Map<String, Object> map = new HashMap<String, Object>();

        map.put("info", table);

        map.put("rows", list);

        map.put("tables", tables);

        return AjaxResult.success(map);

    }



@@ -99,7 +101,7 @@
    /**

     * 导入表结构（保存）

     */

    @PreAuthorize("@ss.hasPermi('tool:gen:list')")

    @PreAuthorize("@ss.hasPermi('tool:gen:import')")

    @Log(title = "代码生成", businessType = BusinessType.IMPORT)

    @PostMapping("/importTable")

    public AjaxResult importTableSave(String tables)

@@ -165,13 +167,25 @@
    @PreAuthorize("@ss.hasPermi('tool:gen:code')")

    @Log(title = "代码生成", businessType = BusinessType.GENCODE)

    @GetMapping("/genCode/{tableName}")

    public AjaxResult genCode(HttpServletResponse response, @PathVariable("tableName") String tableName)

    public AjaxResult genCode(@PathVariable("tableName") String tableName)

    {

        genTableService.generatorCode(tableName);

        return AjaxResult.success();

    }



    /**

     * 同步数据库

     */

    @PreAuthorize("@ss.hasPermi('tool:gen:edit')")

    @Log(title = "代码生成", businessType = BusinessType.UPDATE)

    @GetMapping("/synchDb/{tableName}")

    public AjaxResult synchDb(@PathVariable("tableName") String tableName)

    {

        genTableService.synchDb(tableName);

        return AjaxResult.success();

    }



    /**

     * 批量生成代码

     */

    @PreAuthorize("@ss.hasPermi('tool:gen:code')")