From fec1341c1cb8e11cfbe3fa7dfabe447edb72b630 Mon Sep 17 00:00:00 2001
From: 云 <2163098428@qq.com>
Date: 星期二, 27 十月 2026 15:12:43 +0800
Subject: [PATCH] refactor(auth): 移除多个模块中的权限校验注解

---
 yudao-module-hrm/src/main/java/cn/iocoder/yudao/module/hrm/controller/admin/approval/HrmLeaveApplicationController.java |   13 +++----------
 1 files changed, 3 insertions(+), 10 deletions(-)

diff --git a/yudao-module-hrm/src/main/java/cn/iocoder/yudao/module/hrm/controller/admin/approval/HrmLeaveApplicationController.java b/yudao-module-hrm/src/main/java/cn/iocoder/yudao/module/hrm/controller/admin/approval/HrmLeaveApplicationController.java
index f362ce9..cf8a8d2 100644
--- a/yudao-module-hrm/src/main/java/cn/iocoder/yudao/module/hrm/controller/admin/approval/HrmLeaveApplicationController.java
+++ b/yudao-module-hrm/src/main/java/cn/iocoder/yudao/module/hrm/controller/admin/approval/HrmLeaveApplicationController.java
@@ -5,12 +5,11 @@
 import cn.iocoder.yudao.framework.common.pojo.PageParam;
 import cn.iocoder.yudao.framework.common.pojo.PageResult;
 import cn.iocoder.yudao.framework.excel.core.util.ExcelUtils;
+import cn.iocoder.yudao.framework.security.core.util.SecurityFrameworkUtils;
 import cn.iocoder.yudao.module.hrm.controller.admin.approval.vo.HrmLeaveApplicationPageReqVO;
 import cn.iocoder.yudao.module.hrm.controller.admin.approval.vo.HrmLeaveApplicationRespVO;
 import cn.iocoder.yudao.module.hrm.controller.admin.approval.vo.HrmLeaveApplicationSaveReqVO;
 import cn.iocoder.yudao.module.hrm.service.approval.HrmLeaveApplicationService;
-import cn.iocoder.yudao.module.system.api.user.AdminUserApi;
-import cn.iocoder.yudao.module.system.api.user.dto.AdminUserRespDTO;
 import io.swagger.v3.oas.annotations.Operation;
 import io.swagger.v3.oas.annotations.Parameter;
 import io.swagger.v3.oas.annotations.tags.Tag;
@@ -36,8 +35,6 @@
 
     @Resource
     private HrmLeaveApplicationService leaveApplicationService;
-    @Resource
-    private AdminUserApi adminUserApi;
 
     @PostMapping("/create")
     @Operation(summary = "鍒涘缓璇峰亣鐢宠")
@@ -66,14 +63,12 @@
     @GetMapping("/get")
     @Operation(summary = "鑾峰緱璇峰亣鐢宠璇︽儏")
     @Parameter(name = "id", description = "鐢宠ID", required = true)
-    @PreAuthorize("@ss.hasPermission('hrm:leave:query')")
     public CommonResult<HrmLeaveApplicationRespVO> getLeaveApplication(@RequestParam("id") Long id) {
         return success(leaveApplicationService.getLeaveApplicationDetail(id));
     }
 
     @GetMapping("/page")
     @Operation(summary = "鑾峰緱璇峰亣鐢宠鍒嗛〉")
-    @PreAuthorize("@ss.hasPermission('hrm:leave:query')")
     public CommonResult<PageResult<HrmLeaveApplicationRespVO>> getLeaveApplicationPage(@Valid HrmLeaveApplicationPageReqVO pageReqVO) {
         return success(leaveApplicationService.getLeaveApplicationPage(pageReqVO));
     }
@@ -85,15 +80,13 @@
     @PreAuthorize("@ss.hasPermission('hrm:leave:submit')")
     public CommonResult<Boolean> submitLeaveApplication(@RequestParam("id") Long id,
                                                          @RequestParam("processDefinitionKey") String processDefinitionKey) {
-        // 鑾峰彇褰撳墠鐢ㄦ埛ID
-        AdminUserRespDTO user = adminUserApi.getUser(1L); // TODO: 鑾峰彇褰撳墠鐧诲綍鐢ㄦ埛
-        leaveApplicationService.submitLeaveApplication(id, processDefinitionKey, user.getId());
+        Long userId = SecurityFrameworkUtils.getLoginUserId();
+        leaveApplicationService.submitLeaveApplication(id, processDefinitionKey, userId);
         return success(true);
     }
 
     @GetMapping("/approve-process-definition-list")
     @Operation(summary = "鑾峰彇鍙敤鐨勫鎵规祦绋嬪畾涔夊垪琛�")
-    @PreAuthorize("@ss.hasPermission('hrm:leave:query')")
     public CommonResult<List<Map<String, Object>>> getApproveProcessDefinitionList() {
         return success(leaveApplicationService.getApproveProcessDefinitionList());
     }

--
Gitblit v1.9.3