From bb1210d95ccd0216ff8a352238f0ee25754a2ef2 Mon Sep 17 00:00:00 2001
From: 云 <2163098428@qq.com>
Date: 星期二, 04 八月 2026 09:37:29 +0800
Subject: [PATCH] fix(crm): 修复权限切面中的空指针异常

---
 yudao-module-srm/src/main/java/cn/iocoder/yudao/module/srm/service/tender/SrmBidAwardServiceImpl.java |   38 ++++++++++++++++++++++++++++----------
 1 files changed, 28 insertions(+), 10 deletions(-)

diff --git a/yudao-module-srm/src/main/java/cn/iocoder/yudao/module/srm/service/tender/SrmBidAwardServiceImpl.java b/yudao-module-srm/src/main/java/cn/iocoder/yudao/module/srm/service/tender/SrmBidAwardServiceImpl.java
index 962feb8..6104b97 100644
--- a/yudao-module-srm/src/main/java/cn/iocoder/yudao/module/srm/service/tender/SrmBidAwardServiceImpl.java
+++ b/yudao-module-srm/src/main/java/cn/iocoder/yudao/module/srm/service/tender/SrmBidAwardServiceImpl.java
@@ -14,6 +14,7 @@
 import cn.iocoder.yudao.module.srm.enums.BidStatusEnum;
 import cn.iocoder.yudao.module.srm.enums.ErrorCodeConstants;
 import cn.iocoder.yudao.module.srm.enums.TenderStatusEnum;
+import com.mzt.logapi.starter.annotation.LogRecord;
 import jakarta.annotation.Resource;
 import lombok.extern.slf4j.Slf4j;
 import org.springframework.stereotype.Service;
@@ -25,6 +26,8 @@
 import java.util.*;
 import java.util.function.Function;
 import java.util.stream.Collectors;
+
+import static cn.iocoder.yudao.module.srm.enums.LogRecordConstants.*;
 
 /**
  * SRM 瀹氭爣绠$悊 Service 瀹炵幇绫�
@@ -60,7 +63,14 @@
 
     @Override
     @Transactional(rollbackFor = Exception.class)
+    @LogRecord(type = LOG_AWARD_TYPE, subType = LOG_AWARD_CREATE_SUB_TYPE,
+            bizNo = "{{#createReqVO.awardNo}}", success = LOG_AWARD_CREATE_SUCCESS)
     public Long createAward(SrmBidAwardSaveReqVO createReqVO) {
+        // 妫�鏌ユ嫑鏍囬」鐩姸鎬侊細浠� EVALUATING 鍏佽鍒涘缓瀹氭爣
+        SrmTenderProjectDO project = tenderProjectMapper.selectById(createReqVO.getTenderProjectId());
+        if (project == null || !TenderStatusEnum.canAward(project.getTenderStatus())) {
+            throw ServiceExceptionUtil.exception(ErrorCodeConstants.TENDER_AWARD_FORBIDDEN);
+        }
         // 鏍¢獙鏄惁宸插瓨鍦ㄥ畾鏍�
         SrmBidAwardDO existing = bidAwardMapper.selectByTenderProjectId(createReqVO.getTenderProjectId());
         if (existing != null) {
@@ -95,6 +105,10 @@
     @Transactional(rollbackFor = Exception.class)
     public void deleteAward(Long id) {
         SrmBidAwardDO award = validateAwardExists(id);
+        // 浠呭緟瀹℃壒鐘舵�佸彲鍒犻櫎
+        if (!AwardStatusEnum.PENDING_APPROVAL.getCode().equals(award.getAwardStatus())) {
+            throw ServiceExceptionUtil.exception(ErrorCodeConstants.TENDER_AWARD_FORBIDDEN);
+        }
         bidAwardMapper.deleteById(id);
     }
 
@@ -102,16 +116,18 @@
     @Transactional(rollbackFor = Exception.class)
     public void approveAward(Long id) {
         SrmBidAwardDO award = validateAwardExists(id);
+        // 鏍¢獙鎷涙爣椤圭洰鐘舵�佷负璇勬爣涓�
+        SrmTenderProjectDO project = tenderProjectMapper.selectById(award.getTenderProjectId());
+        if (project == null || !TenderStatusEnum.canAward(project.getTenderStatus())) {
+            throw ServiceExceptionUtil.exception(ErrorCodeConstants.TENDER_AWARD_FORBIDDEN);
+        }
         award.setAwardStatus(AwardStatusEnum.AWARDED.getCode());
         award.setApprovalTime(LocalDateTime.now());
         bidAwardMapper.updateById(award);
 
         // 鏇存柊鎷涙爣椤圭洰鐘舵�佷负宸插畾鏍�
-        SrmTenderProjectDO project = tenderProjectMapper.selectById(award.getTenderProjectId());
-        if (project != null) {
-            project.setTenderStatus(TenderStatusEnum.AWARDED.getCode());
-            tenderProjectMapper.updateById(project);
-        }
+        project.setTenderStatus(TenderStatusEnum.AWARDED.getCode());
+        tenderProjectMapper.updateById(project);
     }
 
     @Override
@@ -121,6 +137,11 @@
         SrmBidAwardDO award = validateAwardExists(id);
         if (!AwardStatusEnum.AWARDED.getCode().equals(award.getAwardStatus())) {
             throw ServiceExceptionUtil.exception(ErrorCodeConstants.AWARD_STATUS_NOT_AWARDED);
+        }
+        // 鏍¢獙鎷涙爣椤圭洰鐘舵�佷负宸插畾鏍�
+        SrmTenderProjectDO project = tenderProjectMapper.selectById(award.getTenderProjectId());
+        if (project == null || !TenderStatusEnum.AWARDED.getCode().equals(project.getTenderStatus())) {
+            throw ServiceExceptionUtil.exception(ErrorCodeConstants.TENDER_AWARD_FORBIDDEN);
         }
 
         // 2. 鏌� SRM 渚涘簲鍟�
@@ -201,11 +222,8 @@
         bidAwardMapper.updateById(award);
 
         // 9. 鏇存柊鎷涙爣椤圭洰鐘舵��
-        SrmTenderProjectDO project = tenderProjectMapper.selectById(award.getTenderProjectId());
-        if (project != null) {
-            project.setTenderStatus(TenderStatusEnum.CLOSED.getCode());
-            tenderProjectMapper.updateById(project);
-        }
+        project.setTenderStatus(TenderStatusEnum.CLOSED.getCode());
+        tenderProjectMapper.updateById(project);
     }
 
     private SrmBidAwardDO validateAwardExists(Long id) {

--
Gitblit v1.9.3