From daf7acb4f107a427e4a83ba1eb26e5e6012cbdaf Mon Sep 17 00:00:00 2001
From: kongzy <kongzy>
Date: 星期三, 26 六月 2024 17:04:52 +0800
Subject: [PATCH] update

---
 exam-admin/src/main/java/com/gkhy/exam/admin/app/AppQuestionController.java |   10 ++++++++--
 1 files changed, 8 insertions(+), 2 deletions(-)

diff --git a/exam-admin/src/main/java/com/gkhy/exam/admin/app/AppQuestionController.java b/exam-admin/src/main/java/com/gkhy/exam/admin/app/AppQuestionController.java
index 5043de1..79b0722 100644
--- a/exam-admin/src/main/java/com/gkhy/exam/admin/app/AppQuestionController.java
+++ b/exam-admin/src/main/java/com/gkhy/exam/admin/app/AppQuestionController.java
@@ -8,6 +8,7 @@
 import io.swagger.annotations.ApiImplicitParams;
 import io.swagger.annotations.ApiOperation;
 import org.springframework.beans.factory.annotation.Autowired;
+import org.springframework.security.access.prepost.PreAuthorize;
 import org.springframework.web.bind.annotation.GetMapping;
 import org.springframework.web.bind.annotation.RequestMapping;
 import org.springframework.web.bind.annotation.RequestParam;
@@ -30,7 +31,7 @@
     @Autowired
     private ExQuestionService questionService;
 
-
+    @PreAuthorize("hasAnyAuthority('train:exam:student')")
     @ApiOperation(value = "刷题获取题目ID列表")
     @ApiImplicitParams({
             @ApiImplicitParam(paramType = "query", name = "bankId", dataType = "long", required = false, value = "题库id"),
@@ -42,7 +43,7 @@
         return CommonResult.success(questionService.getExerciseQuestionList(bankId,exerciseType));
     }
 
-
+    @PreAuthorize("hasAnyAuthority('train:exam:student')")
     @ApiOperation(value = "刷题根据题目ID获取题目详情")
     @ApiImplicitParams({
             @ApiImplicitParam(paramType = "query", name = "questionId", dataType = "long", required = true, value = "题目id")
@@ -53,6 +54,7 @@
         return CommonResult.success(questionService.getExerciseQuestionById(questionId));
     }
 
+    @PreAuthorize("hasAnyAuthority('train:exam:student')")
     @ApiOperation(value = "刷题根据题目ID列表批量获取题目详情")
     @ApiImplicitParams({
             @ApiImplicitParam(paramType = "query", name = "questionIds", dataType = "list", required = true, value = "题目id列表")
@@ -64,6 +66,7 @@
     }
 
 
+    @PreAuthorize("hasAnyAuthority('train:exam:student')")
     @ApiOperation(value = "刷题获取错题题目ID列表")
     @ApiImplicitParams({
             @ApiImplicitParam(paramType = "query", name = "bankId", dataType = "long", required = false, value = "题库id")
@@ -75,6 +78,7 @@
     }
 
 
+    @PreAuthorize("hasAnyAuthority('train:exam:student')")
     @ApiOperation(value = "考试获取题目ID列表(考试完成返回错对,未完成则不返回)")
     @ApiImplicitParams({
             @ApiImplicitParam(paramType = "query", name = "bankId", dataType = "long", required = false, value = "考卷id"),
@@ -86,6 +90,7 @@
         return CommonResult.success(questionService.getPaperQuestionList(paperId,viewType));
     }
 
+    @PreAuthorize("hasAnyAuthority('train:exam:student')")
     @ApiOperation(value = "考试根据题目ID获取题目详情(考试完成返回答案,未完成则不返回)")
     @ApiImplicitParams({
             @ApiImplicitParam(paramType = "query", name = "paperId", dataType = "long", required = true, value = "试卷id"),
@@ -97,6 +102,7 @@
         return CommonResult.success(questionService.getPaperQuestionById(paperId,questionId));
     }
 
+    @PreAuthorize("hasAnyAuthority('train:exam:student')")
     @ApiOperation(value = "考试根据题目ID列表批量获取题目详情")
     @ApiImplicitParams({
             @ApiImplicitParam(paramType = "query", name = "paperId", dataType = "long", required = true, value = "试卷id"),

--
Gitblit v1.9.2