From fec1341c1cb8e11cfbe3fa7dfabe447edb72b630 Mon Sep 17 00:00:00 2001
From: 云 <2163098428@qq.com>
Date: 星期二, 27 十月 2026 15:12:43 +0800
Subject: [PATCH] refactor(auth): 移除多个模块中的权限校验注解

---
 yudao-module-aftersales/src/main/java/cn/iocoder/yudao/module/aftersales/controller/admin/ticket/AfterSaleTicketController.java |    5 +++--
 1 files changed, 3 insertions(+), 2 deletions(-)

diff --git a/yudao-module-aftersales/src/main/java/cn/iocoder/yudao/module/aftersales/controller/admin/ticket/AfterSaleTicketController.java b/yudao-module-aftersales/src/main/java/cn/iocoder/yudao/module/aftersales/controller/admin/ticket/AfterSaleTicketController.java
index 3acf172..6600104 100644
--- a/yudao-module-aftersales/src/main/java/cn/iocoder/yudao/module/aftersales/controller/admin/ticket/AfterSaleTicketController.java
+++ b/yudao-module-aftersales/src/main/java/cn/iocoder/yudao/module/aftersales/controller/admin/ticket/AfterSaleTicketController.java
@@ -43,6 +43,8 @@
     private CrmCustomerApi customerApi;
     @Resource
     private AdminUserApi adminUserApi;
+    @Resource
+    private cn.iocoder.yudao.module.system.api.storage.StorageAttachmentApi storageAttachmentApi;
 
     @PostMapping("/create")
     @Operation(summary = "鍒涘缓鍞悗宸ュ崟")
@@ -71,7 +73,6 @@
     @GetMapping("/get")
     @Operation(summary = "鑾峰緱鍞悗宸ュ崟")
     @Parameter(name = "id", description = "宸ュ崟缂栧彿", required = true, example = "1")
-    @PreAuthorize("@ss.hasPermission('aftersales:ticket:query')")
     public CommonResult<AfterSaleTicketRespVO> getTicket(@RequestParam("id") Long id) {
         AfterSaleTicketDO ticket = ticketService.getTicket(id);
         List<AfterSaleTicketItemDO> items = ticketService.getTicketItemListByTicketId(id);
@@ -79,12 +80,12 @@
         List<AfterSaleTicketRespVO> enrichedList = buildTicketDetailList(List.of(ticket));
         AfterSaleTicketRespVO respVO = enrichedList.get(0);
         respVO.setItems(BeanUtils.toBean(items, AfterSaleTicketRespVO.Item.class));
+        respVO.setAttachmentList(storageAttachmentApi.listAttachments("aftersales_after_sale_ticket", id));
         return success(respVO);
     }
 
     @GetMapping("/page")
     @Operation(summary = "鑾峰緱鍞悗宸ュ崟鍒嗛〉")
-    @PreAuthorize("@ss.hasPermission('aftersales:ticket:query')")
     public CommonResult<PageResult<AfterSaleTicketRespVO>> getTicketPage(@Valid AfterSaleTicketPageReqVO pageReqVO) {
         PageResult<AfterSaleTicketDO> pageResult = ticketService.getTicketPage(pageReqVO, getLoginUserId());
         List<AfterSaleTicketRespVO> list = buildTicketDetailList(pageResult.getList());

--
Gitblit v1.9.3