权限校验
This commit is contained in:
@@ -76,18 +76,6 @@
|
||||
<version>5.0.0</version> <!-- 与 Spring Boot 3.x 兼容,对应 Servlet 5.0 规范 -->
|
||||
<scope>provided</scope> <!-- 关键:运行时由 web 模块的容器(如 Tomcat)提供实现 -->
|
||||
</dependency>
|
||||
<dependency>
|
||||
<groupId>com.paratera</groupId>
|
||||
<artifactId>ipcs</artifactId>
|
||||
<version>1.0</version>
|
||||
<scope>compile</scope>
|
||||
</dependency>
|
||||
<dependency>
|
||||
<groupId>com.paratera</groupId>
|
||||
<artifactId>ipcs</artifactId>
|
||||
<version>1.0</version>
|
||||
<scope>compile</scope>
|
||||
</dependency>
|
||||
|
||||
</dependencies>
|
||||
<dependencyManagement>
|
||||
|
||||
@@ -46,8 +46,18 @@ public class FileUserPermissionServiceImpl extends ServiceImpl<FileUserPermissio
|
||||
return true;
|
||||
}
|
||||
}
|
||||
return validPermission(fileId, userId, permission);
|
||||
}
|
||||
|
||||
// 查询当前文件的权限
|
||||
private boolean validPermission(Long fileId, Long userId, FilePermissionEnum permission) {
|
||||
FileMetadataInfo fileMetadataInfo = fileMetadataInfoService.getById(fileId);
|
||||
|
||||
if (ObjectUtils.isEmpty(fileMetadataInfo)) {
|
||||
log.warn("文件不存在,fileId: {}", fileId);
|
||||
return false;
|
||||
}
|
||||
|
||||
// 查询当前文件的权限
|
||||
FileUserPermission fileUserPermission = this.lambdaQuery()
|
||||
.eq(FileUserPermission::getTFilemetaId, fileId)
|
||||
.eq(FileUserPermission::getUserId, userId)
|
||||
@@ -71,6 +81,6 @@ public class FileUserPermissionServiceImpl extends ServiceImpl<FileUserPermissio
|
||||
return false;
|
||||
}
|
||||
|
||||
return hasFilePermission(parentId, userId, permission);
|
||||
return validPermission(parentId, userId, permission);
|
||||
}
|
||||
}
|
||||
|
||||
Reference in New Issue
Block a user