From fec1341c1cb8e11cfbe3fa7dfabe447edb72b630 Mon Sep 17 00:00:00 2001
From: 云 <2163098428@qq.com>
Date: 星期二, 27 十月 2026 15:12:43 +0800
Subject: [PATCH] refactor(auth): 移除多个模块中的权限校验注解

---
 yudao-module-crm/src/main/java/cn/iocoder/yudao/module/crm/controller/admin/contract/CrmContractController.java |   22 ++++++++++++++++------
 1 files changed, 16 insertions(+), 6 deletions(-)

diff --git a/yudao-module-crm/src/main/java/cn/iocoder/yudao/module/crm/controller/admin/contract/CrmContractController.java b/yudao-module-crm/src/main/java/cn/iocoder/yudao/module/crm/controller/admin/contract/CrmContractController.java
index 183ce36..7e59120 100644
--- a/yudao-module-crm/src/main/java/cn/iocoder/yudao/module/crm/controller/admin/contract/CrmContractController.java
+++ b/yudao-module-crm/src/main/java/cn/iocoder/yudao/module/crm/controller/admin/contract/CrmContractController.java
@@ -118,7 +118,6 @@
     @GetMapping("/get")
     @Operation(summary = "鑾峰緱鍚堝悓")
     @Parameter(name = "id", description = "缂栧彿", required = true, example = "1024")
-    @PreAuthorize("@ss.hasPermission('crm:contract:query')")
     public CommonResult<CrmContractRespVO> getContract(@RequestParam("id") Long id) {
         CrmContractDO contract = contractService.getContract(id);
         return success(buildContractDetail(contract));
@@ -146,9 +145,23 @@
         return contractVO;
     }
 
+    @GetMapping("/download-document")
+    @Operation(summary = "鎸夎喘閿�鍚堝悓妯℃澘涓嬭浇鍚堝悓 Word 鏂囦欢")
+    public void downloadDocument(@RequestParam("id") Long id, HttpServletResponse response) throws IOException {
+        // getContract 鍖呭惈鍚堝悓鏁版嵁鏉冮檺鏍¢獙锛涙部鐢ㄨ鎯呴〉鐨勪骇鍝併�佸崟浣嶅拰瀹㈡埛淇℃伅銆�
+        CrmContractRespVO contract = buildContractDetail(contractService.getContract(id));
+        Assert.notNull(contract, "鍚堝悓涓嶅瓨鍦�");
+        byte[] content = cn.iocoder.yudao.module.crm.service.contract.CrmContractDocumentRenderer.render(contract);
+        String filename = "璐攢鍚堝悓-" + contract.getNo() + ".docx";
+        response.setContentType("application/vnd.openxmlformats-officedocument.wordprocessingml.document");
+        response.setHeader("Cache-Control", "no-store");
+        response.setHeader("Content-Disposition", "attachment; filename*=UTF-8''" + java.net.URLEncoder.encode(filename, java.nio.charset.StandardCharsets.UTF_8).replace("+", "%20"));
+        response.setContentLength(content.length);
+        response.getOutputStream().write(content);
+    }
+
     @GetMapping("/page")
     @Operation(summary = "鑾峰緱鍚堝悓鍒嗛〉")
-    @PreAuthorize("@ss.hasPermission('crm:contract:query')")
     public CommonResult<PageResult<CrmContractRespVO>> getContractPage(@Valid CrmContractPageReqVO pageVO) {
         PageResult<CrmContractDO> pageResult = contractService.getContractPage(pageVO, getLoginUserId());
         return success(BeanUtils.toBean(pageResult, CrmContractRespVO.class).setList(buildContractDetailList(pageResult.getList())));
@@ -176,6 +189,7 @@
     @ApiAccessLog(operateType = EXPORT)
     public void exportContractExcel(@Valid CrmContractPageReqVO exportReqVO,
                                     HttpServletResponse response) throws IOException {
+        exportReqVO.setPageSize(PageParam.PAGE_SIZE_NONE); // 涓嶅垎椤碉紝瀵煎嚭鍏ㄩ儴绗﹀悎鏉′欢鐨勫悎鍚�
         PageResult<CrmContractDO> pageResult = contractService.getContractPage(exportReqVO, getLoginUserId());
         // 鎷兼帴瀹㈡埛銆佸晢鏈恒�佺绾︿汉銆佸洖娆鹃噾棰濈瓑鍏宠仈淇℃伅
         List<CrmContractRespVO> list = buildContractDetailList(pageResult.getList());
@@ -235,7 +249,6 @@
 
     @GetMapping("/approve-process-list")
     @Operation(summary = "鑾峰彇鍚堝悓瀹℃壒娴佺▼鍒楄〃")
-    @PreAuthorize("@ss.hasPermission('crm:contract:query')")
     public CommonResult<List<Map<String, Object>>> getContractApproveProcessList() {
         return success(contractService.getContractApproveProcessDefinitionList());
     }
@@ -291,14 +304,12 @@
 
     @GetMapping("/audit-count")
     @Operation(summary = "鑾峰緱寰呭鏍稿悎鍚屾暟閲�")
-    @PreAuthorize("@ss.hasPermission('crm:contract:query')")
     public CommonResult<Long> getAuditContractCount() {
         return success(contractService.getAuditContractCount(getLoginUserId()));
     }
 
     @GetMapping("/remind-count")
     @Operation(summary = "鑾峰緱鍗冲皢鍒版湡锛堟彁閱掞級鐨勫悎鍚屾暟閲�")
-    @PreAuthorize("@ss.hasPermission('crm:contract:query')")
     public CommonResult<Long> getRemindContractCount() {
         return success(contractService.getRemindContractCount(getLoginUserId()));
     }
@@ -306,7 +317,6 @@
     @GetMapping("/simple-list")
     @Operation(summary = "鑾峰緱鍚堝悓绮剧畝鍒楄〃", description = "鍙寘鍚殑鍚堝悓锛屼富瑕佺敤浜庡墠绔殑涓嬫媺閫夐」")
     @Parameter(name = "customerId", description = "瀹㈡埛缂栧彿", required = true)
-    @PreAuthorize("@ss.hasPermission('crm:contract:query')")
     public CommonResult<List<CrmContractRespVO>> getContractSimpleList(@RequestParam("customerId") Long customerId) {
         CrmContractPageReqVO pageReqVO = new CrmContractPageReqVO().setCustomerId(customerId);
         pageReqVO.setPageSize(PageParam.PAGE_SIZE_NONE); // 涓嶅垎椤�

--
Gitblit v1.9.3