From 8c65f898ed6e5b0c7a94c792c4562f6ec831dccd Mon Sep 17 00:00:00 2001
From: gaoluyang <2820782392@qq.com>
Date: 星期六, 07 十一月 2026 08:50:53 +0800
Subject: [PATCH] feat: 完善质检、生产、销售、财务与人事模块并接入审批流程

---
 yudao-module-bi/src/main/java/cn/iocoder/yudao/module/bi/controller/admin/dashboard/DashboardController.java |   13 +++++++++++--
 1 files changed, 11 insertions(+), 2 deletions(-)

diff --git a/yudao-module-bi/src/main/java/cn/iocoder/yudao/module/bi/controller/admin/dashboard/DashboardController.java b/yudao-module-bi/src/main/java/cn/iocoder/yudao/module/bi/controller/admin/dashboard/DashboardController.java
index 712b3d3..cb66d07 100644
--- a/yudao-module-bi/src/main/java/cn/iocoder/yudao/module/bi/controller/admin/dashboard/DashboardController.java
+++ b/yudao-module-bi/src/main/java/cn/iocoder/yudao/module/bi/controller/admin/dashboard/DashboardController.java
@@ -3,6 +3,7 @@
 import cn.iocoder.yudao.framework.common.pojo.CommonResult;
 import cn.iocoder.yudao.module.bi.dal.dataobject.BiDashboardDO;
 import cn.iocoder.yudao.module.bi.service.dashboard.DashboardService;
+import cn.iocoder.yudao.framework.security.core.service.SecurityFrameworkService;
 import io.swagger.v3.oas.annotations.Operation;
 import io.swagger.v3.oas.annotations.Parameter;
 import io.swagger.v3.oas.annotations.tags.Tag;
@@ -25,16 +26,24 @@
     @Resource
     private DashboardService dashboardService;
 
+    @Resource
+    private SecurityFrameworkService securityFrameworkService;
+
     @GetMapping("/list")
     @Operation(summary = "鑾峰彇浠〃鐩樺垪琛�")
     public CommonResult<List<BiDashboardDO>> getDashboardList() {
-        return success(dashboardService.getDashboardList());
+        return success(dashboardService.getDashboardList().stream()
+                .filter(dashboard -> securityFrameworkService.hasPermission(
+                        "bi:dashboard:" + dashboard.getCode() + ":query"))
+                .toList());
     }
 
     @PostMapping("/{dashboardCode}/data")
+    @PreAuthorize("@ss.hasPermission('bi:dashboard:' + #dashboardCode + ':query')")
     @Operation(summary = "鑾峰彇浠〃鐩樻暟鎹�")
     @Parameter(name = "dashboardCode", description = "浠〃鐩樼紪鐮�", required = true,
-            example = "purchase_sales")
    public CommonResult<List<Map<String, Object>>> getDashboardData(
+            example = "purchase_sales")
+    public CommonResult<List<Map<String, Object>>> getDashboardData(
             @PathVariable("dashboardCode") String dashboardCode,
             @RequestBody(required = false) Map<String, Object> params) {
         List<Map<String, Object>> data = dashboardService.getDashboardData(dashboardCode, params);

--
Gitblit v1.9.3