From fec1341c1cb8e11cfbe3fa7dfabe447edb72b630 Mon Sep 17 00:00:00 2001
From: 云 <2163098428@qq.com>
Date: 星期二, 27 十月 2026 15:12:43 +0800
Subject: [PATCH] refactor(auth): 移除多个模块中的权限校验注解

---
 yudao-module-srm/src/main/java/cn/iocoder/yudao/module/srm/controller/admin/tender/SrmTenderProjectController.java |   25 ++++++++++++++++++++-----
 1 files changed, 20 insertions(+), 5 deletions(-)

diff --git a/yudao-module-srm/src/main/java/cn/iocoder/yudao/module/srm/controller/admin/tender/SrmTenderProjectController.java b/yudao-module-srm/src/main/java/cn/iocoder/yudao/module/srm/controller/admin/tender/SrmTenderProjectController.java
index 8126210..d403ada 100644
--- a/yudao-module-srm/src/main/java/cn/iocoder/yudao/module/srm/controller/admin/tender/SrmTenderProjectController.java
+++ b/yudao-module-srm/src/main/java/cn/iocoder/yudao/module/srm/controller/admin/tender/SrmTenderProjectController.java
@@ -5,6 +5,8 @@
 import cn.iocoder.yudao.framework.common.util.object.BeanUtils;
 import cn.iocoder.yudao.module.srm.controller.admin.tender.vo.*;
 import cn.iocoder.yudao.module.srm.service.tender.SrmTenderProjectService;
+import cn.iocoder.yudao.module.srm.service.tender.SrmTenderProjectServiceImpl;
+import cn.iocoder.yudao.module.system.api.storage.StorageAttachmentApi;
 import io.swagger.v3.oas.annotations.Operation;
 import io.swagger.v3.oas.annotations.Parameter;
 import io.swagger.v3.oas.annotations.tags.Tag;
@@ -26,6 +28,9 @@
 
     @Resource
     private SrmTenderProjectService tenderProjectService;
+
+    @Resource
+    private StorageAttachmentApi storageAttachmentApi;
 
     @PostMapping("/create")
     @Operation(summary = "鍒涘缓鎷涙爣椤圭洰")
@@ -52,16 +57,27 @@
 
     @GetMapping("/get")
     @Operation(summary = "鑾峰彇鎷涙爣椤圭洰璇︽儏")
-    @PreAuthorize("@ss.hasPermission('srm:tender-project:query')")
     public CommonResult<SrmTenderProjectRespVO> getTenderProject(@RequestParam("id") Long id) {
-        return success(BeanUtils.toBean(tenderProjectService.getTenderProject(id), SrmTenderProjectRespVO.class));
+        var resp = BeanUtils.toBean(tenderProjectService.getTenderProject(id), SrmTenderProjectRespVO.class);
+        enrichAttachments(List.of(resp));
+        return success(resp);
     }
 
     @GetMapping("/page")
     @Operation(summary = "鑾峰彇鎷涙爣椤圭洰鍒嗛〉")
-    @PreAuthorize("@ss.hasPermission('srm:tender-project:query')")
     public CommonResult<PageResult<SrmTenderProjectRespVO>> getTenderProjectPage(@Valid SrmTenderProjectPageReqVO pageReqVO) {
-        return success(BeanUtils.toBean(tenderProjectService.getTenderProjectPage(pageReqVO), SrmTenderProjectRespVO.class));
+        var pageResult = tenderProjectService.getTenderProjectPage(pageReqVO);
+        var respList = BeanUtils.toBean(pageResult.getList(), SrmTenderProjectRespVO.class);
+        enrichAttachments(respList);
+        return success(new PageResult<>(respList, pageResult.getTotal()));
+    }
+
+    // ========== 鍏宠仈鏁版嵁濉厖 ==========
+
+    private void enrichAttachments(List<SrmTenderProjectRespVO> list) {
+        if (list == null || list.isEmpty()) return;
+        list.forEach(vo -> vo.setAttachmentList(storageAttachmentApi.listAttachments(
+                SrmTenderProjectServiceImpl.TENDER_PROJECT_RECORD_TYPE, vo.getId())));
     }
 
     @PutMapping("/publish")
@@ -150,7 +166,6 @@
 
     @GetMapping("/material/list")
     @Operation(summary = "鑾峰彇鎷涙爣鐗╂枡鍒楄〃")
-    @PreAuthorize("@ss.hasPermission('srm:tender-project:query')")
     public CommonResult<List<SrmTenderMaterialRespVO>> getMaterialList(@RequestParam("tenderProjectId") Long tenderProjectId) {
         return success(BeanUtils.toBean(tenderProjectService.getMaterialList(tenderProjectId), SrmTenderMaterialRespVO.class));
     }

--
Gitblit v1.9.3