From f0f00e9ba8a755e4317e029d73b69a92ad9f9df1 Mon Sep 17 00:00:00 2001
From: kongzy <kongzy>
Date: 星期六, 14 九月 2024 17:02:41 +0800
Subject: [PATCH] update

---
 exam-system/src/main/java/com/gkhy/exam/system/service/impl/ExExamRecordServiceImpl.java |    7 +++++--
 1 files changed, 5 insertions(+), 2 deletions(-)

diff --git a/exam-system/src/main/java/com/gkhy/exam/system/service/impl/ExExamRecordServiceImpl.java b/exam-system/src/main/java/com/gkhy/exam/system/service/impl/ExExamRecordServiceImpl.java
index a0479b9..814f370 100644
--- a/exam-system/src/main/java/com/gkhy/exam/system/service/impl/ExExamRecordServiceImpl.java
+++ b/exam-system/src/main/java/com/gkhy/exam/system/service/impl/ExExamRecordServiceImpl.java
@@ -46,6 +46,8 @@
     @Override
     public int insertExamRecord(ExExamRecord examRecord) {
         checkUserAllowed(examRecord);
+        examRecord.setCompanyId(SecurityUtils.getLoginUser().getUser().getCompanyId());
+        examRecord.setCreateBy(SecurityUtils.getUsername());
         int row=baseMapper.insert(examRecord);
         if(row<1){
             throw new ApiException("新增登记记录失败");
@@ -56,6 +58,7 @@
     @Override
     public int updateExamRecord(ExExamRecord examRecord) {
         checkUserAllowed(examRecord);
+        examRecord.setUpdateBy(SecurityUtils.getUsername());
         int row=baseMapper.updateById(examRecord);
         if(row<1){
             throw new ApiException("更新登记记录失败");
@@ -72,12 +75,12 @@
     public void checkUserAllowed(ExExamRecord examRecord) {
         SysUser currentUser= SecurityUtils.getLoginUser().getUser();
         if(currentUser.getUserType().equals(UserTypeEnum.SYSTEM_USER.getCode())){
-            return;
+            throw new ApiException("管理员没有权限操作");
         }
         if(currentUser.getUserType().equals(UserTypeEnum.STUDENT.getCode())){
             throw new ApiException("没有权限操作");
         }
-        if(!currentUser.getCompanyId().equals(examRecord.getCompanyId())){
+        if(examRecord.getCompanyId()!=null&&!currentUser.getCompanyId().equals(examRecord.getCompanyId())){
             throw new ApiException("没有权限操作其他企业登记记录");
         }
     }

--
Gitblit v1.9.2