From daf7acb4f107a427e4a83ba1eb26e5e6012cbdaf Mon Sep 17 00:00:00 2001 From: kongzy <kongzy> Date: 星期三, 26 六月 2024 17:04:52 +0800 Subject: [PATCH] update --- exam-admin/src/main/java/com/gkhy/exam/admin/app/AppPhaseStudentController.java | 3 +++ 1 files changed, 3 insertions(+), 0 deletions(-) diff --git a/exam-admin/src/main/java/com/gkhy/exam/admin/app/AppPhaseStudentController.java b/exam-admin/src/main/java/com/gkhy/exam/admin/app/AppPhaseStudentController.java index f959c5b..515568d 100644 --- a/exam-admin/src/main/java/com/gkhy/exam/admin/app/AppPhaseStudentController.java +++ b/exam-admin/src/main/java/com/gkhy/exam/admin/app/AppPhaseStudentController.java @@ -9,6 +9,7 @@ import io.swagger.annotations.ApiImplicitParams; import io.swagger.annotations.ApiOperation; import org.springframework.beans.factory.annotation.Autowired; +import org.springframework.security.access.prepost.PreAuthorize; import org.springframework.web.bind.annotation.GetMapping; import org.springframework.web.bind.annotation.RequestMapping; import org.springframework.web.bind.annotation.RequestParam; @@ -29,6 +30,7 @@ @Autowired private ExPhaseStudentService phaseStudentService; + @PreAuthorize("hasAnyAuthority('train:exam:student')") @ApiOperation(value = "分页获取学员的批次列表(分页)") @ApiImplicitParams({ @ApiImplicitParam(paramType = "query", name = "pageNum", dataType = "int", required = false, value = "当前页,默认1"), @@ -39,6 +41,7 @@ return CommonResult.success(phaseStudentService.selectPhaseStudentListForStudent(phaseStudent)); } + @PreAuthorize("hasAnyAuthority('train:exam:student')") @ApiOperation(value = "根据id查询学员批次信息") @GetMapping(value = { "/getPhaseStudentById" }) public CommonResult getPhaseStudentById(@RequestParam(value = "phaseStudentId", required = true) Long phaseStudentId) -- Gitblit v1.9.2