Kaynağa Gözat

fix(app):修复商户权限验证逻辑

- 调整权限检查条件,仅对特定类型的订单进行商户归属校验-保留原有权限异常提示信息
- 确保非指定类型订单可被跨商户查询
wzq 1 hafta önce
ebeveyn
işleme
2b677493b0

+ 4 - 2
national-motion-module-system/national-motion-system-biz/src/main/java/org/jeecg/modules/system/app/service/impl/AppOrderServiceImpl.java

@@ -265,8 +265,10 @@ public class AppOrderServiceImpl extends ServiceImpl<AppOrderMapper, AppOrder> i
     public ScanCodeQueryOrderVO scanCodeQueryOrder(String orderId) {
         LoginUser loginUser = (LoginUser) SecurityUtils.getSubject().getPrincipal();
         AppOrder appOrder = appOrderMapper.selectById(orderId);
-        if(!appOrder.getOrgCode().equals(loginUser.getOrgCode())) {
-            throw new JeecgBootException("当前券码不属于该商户,无权限操作!");
+        if (appOrder.getType() != 1){
+            if(!appOrder.getOrgCode().equals(loginUser.getOrgCode())) {
+                throw new JeecgBootException("当前券码不属于该商户,无权限操作!");
+            }
         }
         AppSite site = appSiteMapper.selectOne(Wrappers.<AppSite>lambdaQuery().eq(AppSite::getOrgCode, appOrder.getOrgCode()));