From b30f4c40c77a940a2a749a676e901787f55040b0 Mon Sep 17 00:00:00 2001
From: zhangwencui <1064582902@qq.com>
Date: 星期五, 06 十一月 2026 11:48:25 +0800
Subject: [PATCH] 流程优化

---
 src/main/java/com/ruoyi/projectManagement/controller/InfoController.java |   10 ++++++++++
 1 files changed, 10 insertions(+), 0 deletions(-)

diff --git a/src/main/java/com/ruoyi/projectManagement/controller/InfoController.java b/src/main/java/com/ruoyi/projectManagement/controller/InfoController.java
index 56baf0f..ebdb98f 100644
--- a/src/main/java/com/ruoyi/projectManagement/controller/InfoController.java
+++ b/src/main/java/com/ruoyi/projectManagement/controller/InfoController.java
@@ -11,6 +11,7 @@
 import io.swagger.v3.oas.annotations.tags.Tag;
 import io.swagger.v3.oas.annotations.Operation;
 import lombok.RequiredArgsConstructor;
+import org.springframework.security.access.prepost.PreAuthorize;
 import org.springframework.web.bind.annotation.*;
 
 import jakarta.validation.Valid;
@@ -30,6 +31,8 @@
     private final InfoStageHandleService infoStageHandleService;
 
     @PostMapping("/save")
+    @PreAuthorize("(#saveInfoVo.info.id == null && @ss.hasPermi('project:info:add')) || " +
+            "(#saveInfoVo.info.id != null && @ss.hasPermi('project:info:edit'))")
     @Operation(summary = "淇濆瓨")
     public AjaxResult save(@RequestBody @Valid SaveInfoVo saveInfoVo) {
         infoService.save(saveInfoVo);
@@ -37,6 +40,7 @@
     }
 
     @PostMapping("/updateStatus")
+    @PreAuthorize("@ss.hasPermi('project:legacy:maintain')")
     @Operation(summary = "淇敼鐘舵��")
     public AjaxResult updateStatus(@RequestBody @Valid UpdateStateInfo updateStateInfo){
         infoService.updateStatus(updateStateInfo);
@@ -44,6 +48,7 @@
     }
 
     @PostMapping("/delete/{id}")
+    @PreAuthorize("@ss.hasPermi('project:info:remove')")
     @Operation(summary = "鍒犻櫎")
     public AjaxResult delete(@PathVariable Long id) {
         infoService.deleteInfo(id);
@@ -51,6 +56,7 @@
     }
 
     @PostMapping("/listPage")
+    @PreAuthorize("@ss.hasPermi('project:info:list')")
     @Operation(summary = "鍒嗛〉鍒楄〃")
     public AjaxResult listPage(@RequestBody @Valid SearchInfoVo vo) {
         return AjaxResult.success(infoService.searchListInfo(vo));
@@ -58,12 +64,14 @@
 
 
     @PostMapping("/{id}")
+    @PreAuthorize("@ss.hasPermi('project:info:query')")
     @Operation(summary = "璇︽儏")
     public AjaxResult getInfoById(@PathVariable Long id) {
         return AjaxResult.success(infoService.getInfoById(id));
     }
 
     @PostMapping("/saveStage")
+    @PreAuthorize("denyAll()")
     @Operation(summary = "淇濆瓨闃舵")
     public AjaxResult saveStage(@RequestBody @Valid SaveInfoStageVo dto) {
         infoStageHandleService.save(dto);
@@ -71,12 +79,14 @@
     }
 
     @PostMapping("/listStage/{id}")
+    @PreAuthorize("denyAll()")
     @Operation(summary = "鍒楄〃闃舵")
     public AjaxResult listStage(@PathVariable Long id) {
         return AjaxResult.success(infoStageHandleService.getListVoByInfoId(id));
     }
 
     @PostMapping("/deleteStage/{id}")
+    @PreAuthorize("denyAll()")
     @Operation(summary = "鍒犻櫎闃舵")
     public AjaxResult deleteStage(@PathVariable Long id) {
         infoStageHandleService.deleteById(id);

--
Gitblit v1.9.3