From c9b397adac24d2d9f218c09a5e0012a32358de91 Mon Sep 17 00:00:00 2001 From: zhaokai Date: Thu, 22 Jan 2026 09:34:41 +0800 Subject: [PATCH] =?UTF-8?q?=E6=95=99=E8=82=B2=E8=B5=84=E6=BA=90=E4=BF=AE?= =?UTF-8?q?=E6=94=B9=E4=B8=8B=E7=BA=BF=E9=AA=8C=E8=AF=81?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- .../edu/command/resource/CurriculumUpdateExe.java | 11 +++++++++-- .../src/main/resources/mapper/CurriculumMapper.xml | 2 +- 2 files changed, 10 insertions(+), 3 deletions(-) diff --git a/web-app/src/main/java/com/zcloud/edu/command/resource/CurriculumUpdateExe.java b/web-app/src/main/java/com/zcloud/edu/command/resource/CurriculumUpdateExe.java index 079c079..2328b02 100644 --- a/web-app/src/main/java/com/zcloud/edu/command/resource/CurriculumUpdateExe.java +++ b/web-app/src/main/java/com/zcloud/edu/command/resource/CurriculumUpdateExe.java @@ -144,8 +144,15 @@ public class CurriculumUpdateExe { errorList.add(curriculumDO.getCurriculumName()+"课程已绑定班级"); } } - //判断是否是本人创建的 - if(!AuthContext.getUserId().equals(curriculumDO.getCreateId())){ + + //如果是企业，可以看本企业下所有的，如果是个人，只能看个人的，判断登录的账号是企业主账号还是个人 + Boolean isCorpAccount = corpInfoRepository.checkCorp(); + // 企业账户：检查租户ID匹配 + if (isCorpAccount && !AuthContext.getTenantId().equals(curriculumDO.getTenantId())) { + errorList.add(curriculumDO.getCurriculumName()+"课程不是本企业的"); + } + // 个人账户：检查创建者ID匹配 + if (!isCorpAccount && curriculumDO.getCreateId().equals(AuthContext.getUserId())) { errorList.add(curriculumDO.getCurriculumName()+"课程不是本人创建的"); } diff --git a/web-infrastructure/src/main/resources/mapper/CurriculumMapper.xml b/web-infrastructure/src/main/resources/mapper/CurriculumMapper.xml index ce4c028..2c6c236 100644 --- a/web-infrastructure/src/main/resources/mapper/CurriculumMapper.xml +++ b/web-infrastructure/src/main/resources/mapper/CurriculumMapper.xml @@ -44,7 +44,7 @@ group by c.id - order by c.create_time asc + order by c.create_time desc