From 0520581c65a2d93c1d02359180c77b8fb911dc55 Mon Sep 17 00:00:00 2001
From: 云 <2163098428@qq.com>
Date: 星期二, 27 十月 2026 16:12:11 +0800
Subject: [PATCH] refactor(auth): 移除多个模块中的权限校验注解

---
 yudao-module-system/src/main/java/cn/iocoder/yudao/module/system/controller/admin/user/UserController.java |   13 ++++++++++---
 1 files changed, 10 insertions(+), 3 deletions(-)

diff --git a/yudao-module-system/src/main/java/cn/iocoder/yudao/module/system/controller/admin/user/UserController.java b/yudao-module-system/src/main/java/cn/iocoder/yudao/module/system/controller/admin/user/UserController.java
index 9212aaf..65a2ad6 100644
--- a/yudao-module-system/src/main/java/cn/iocoder/yudao/module/system/controller/admin/user/UserController.java
+++ b/yudao-module-system/src/main/java/cn/iocoder/yudao/module/system/controller/admin/user/UserController.java
@@ -42,6 +42,8 @@
 import static cn.iocoder.yudao.framework.common.pojo.CommonResult.success;
 import static cn.iocoder.yudao.framework.common.util.collection.CollectionUtils.convertList;
 import static cn.iocoder.yudao.framework.common.util.collection.CollectionUtils.convertSet;
+import static cn.iocoder.yudao.framework.common.exception.util.ServiceExceptionUtil.exception;
+import static cn.iocoder.yudao.module.system.enums.ErrorCodeConstants.USER_POST_NOT_EMPTY;
 
 @Tag(name = "绠$悊鍚庡彴 - 鐢ㄦ埛")
 @RestController
@@ -62,6 +64,10 @@
     @Operation(summary = "鏂板鐢ㄦ埛")
     @PreAuthorize("@ss.hasPermission('system:user:create')")
     public CommonResult<Long> createUser(@Valid @RequestBody UserSaveReqVO reqVO) {
+        // 鏍¢獙宀椾綅蹇呭~
+        if (CollUtil.isEmpty(reqVO.getPostIds())) {
+            throw exception(USER_POST_NOT_EMPTY);
+        }
         Long id = userService.createUser(reqVO);
         return success(id);
     }
@@ -70,6 +76,10 @@
     @Operation(summary = "淇敼鐢ㄦ埛")
     @PreAuthorize("@ss.hasPermission('system:user:update')")
     public CommonResult<Boolean> updateUser(@Valid @RequestBody UserSaveReqVO reqVO) {
+        // 鏍¢獙宀椾綅蹇呭~
+        if (CollUtil.isEmpty(reqVO.getPostIds())) {
+            throw exception(USER_POST_NOT_EMPTY);
+        }
         userService.updateUser(reqVO);
         return success(true);
     }
@@ -110,7 +120,6 @@
 
     @GetMapping("/page")
     @Operation(summary = "鑾峰緱鐢ㄦ埛鍒嗛〉鍒楄〃")
-    @PreAuthorize("@ss.hasPermission('system:user:query')")
     public CommonResult<PageResult<UserRespVO>> getUserPage(@Valid UserPageReqVO pageReqVO) {
         // 鑾峰緱鐢ㄦ埛鍒嗛〉鍒楄〃
         PageResult<AdminUserDO> pageResult = userService.getUserPage(pageReqVO);
@@ -127,7 +136,6 @@
     @GetMapping("/list")
     @Operation(summary = "鑾峰緱鐢ㄦ埛璇︽儏鍒楄〃")
     @Parameter(name = "ids", description = "缂栧彿鍒楄〃", required = true, example = "[1024]")
-    @PreAuthorize("@ss.hasPermission('system:user:query')")
     public CommonResult<List<UserRespVO>> getUserList(@RequestParam("ids") List<Long> ids) {
         List<AdminUserDO> list = userService.getUserList(ids);
         if (CollUtil.isEmpty(list)) {
@@ -185,7 +193,6 @@
     @GetMapping("/get")
     @Operation(summary = "鑾峰緱鐢ㄦ埛璇︽儏")
     @Parameter(name = "id", description = "缂栧彿", required = true, example = "1024")
-    @PreAuthorize("@ss.hasPermission('system:user:query')")
     public CommonResult<UserRespVO> getUser(@RequestParam("id") Long id) {
         AdminUserDO user = userService.getUser(id);
         if (user == null) {

--
Gitblit v1.9.3