zcloud_gbs
/
zcloud_gbs_edu
16
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

fix(): 修正课程权限验证逻辑

dev
lishiwei 2026-07-30 10:31:33 +08:00
parent 6d4a82ab67
commit 365c5c1723
1 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
web-app/src/main/java/com/zcloud/edu/command/resource/CurriculumUpdateExe.java
View File

@ -148,11 +148,11 @@ public class CurriculumUpdateExe {
//如果是企业，可以看本企业下所有的，如果是个人，只能看个人的，判断登录的账号是企业主账号还是个人
Boolean isCorpAccount = corpInfoRepository.checkCorp();
// 企业账户：检查租户ID匹配
if ((isCorpAccount||(AuthContext.getRoleIds()!=null && AuthContext.getRoleIds().contains(2008483105201106946L))) && AuthContext.getTenantId().equals(curriculumDO.getCorpinfoId())) {
if ((isCorpAccount||(AuthContext.getRoleIds()!=null && AuthContext.getRoleIds().contains(2008483105201106946L))) && !AuthContext.getTenantId().equals(curriculumDO.getCorpinfoId())) {
errorList.add(curriculumDO.getCurriculumName()+"课程不是本企业的");
}
// 个人账户：检查创建者ID匹配
if (!isCorpAccount && curriculumDO.getCreateId().equals(AuthContext.getUserId())) {
if (!isCorpAccount && !curriculumDO.getCreateId().equals(AuthContext.getUserId())) {
errorList.add(curriculumDO.getCurriculumName()+"课程不是本人创建的");
}