zcloud_gbs
/
zcloud_gbs_edu
15
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

fix(auth): 修复企业账户权限验证中的租户ID匹配问题

dev
zhaokai 2026-03-09 13:44:54 +08:00
parent e35c3733ed
commit de86566389
5 changed files with 10 additions and 8 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
web-app/src/main/java/com/zcloud/edu/command/query/resource/CurriculumQueryExe.java
View File

@ -82,8 +82,9 @@ public class CurriculumQueryExe {
return; return;
} }
// 个人账户：检查创建者ID匹配 // 个人账户：检查创建者ID匹配
if (!isCorpAccount && videoCoursewareCO.getCreateId().equals(AuthContext.getUserId())) { if ((!isCorpAccount || (AuthContext.getRoleIds()!=null && AuthContext.getRoleIds().contains(2008483105201106946L))) && videoCoursewareCO.getCreateId().equals(AuthContext.getUserId())) {
videoCoursewareCO.setIsUserCreate(true);
videoCoursewareCO.setIsUserCreate(true);
} }
}); });
return PageResponse.of(examCenterCOS, pageResponse.getTotalCount(), pageResponse.getPageSize(), pageResponse.getPageIndex()); return PageResponse.of(examCenterCOS, pageResponse.getTotalCount(), pageResponse.getPageSize(), pageResponse.getPageIndex());

2
web-app/src/main/java/com/zcloud/edu/command/query/resource/ExamPaperQueryExe.java
View File

@ -74,7 +74,7 @@ public class ExamPaperQueryExe {
} }
// 个人账户：检查创建者ID匹配 // 个人账户：检查创建者ID匹配
if (!isCorpAccount && videoCoursewareCO.getCreateId().equals(AuthContext.getUserId())) { if ((!isCorpAccount || (AuthContext.getRoleIds()!=null && AuthContext.getRoleIds().contains(2008483105201106946L))) && videoCoursewareCO.getCreateId().equals(AuthContext.getUserId())) {
videoCoursewareCO.setIsUserCreate(true); videoCoursewareCO.setIsUserCreate(true);
} }

2
web-app/src/main/java/com/zcloud/edu/command/query/resource/VideoCoursewareQueryExe.java
View File

@ -75,7 +75,7 @@ public class VideoCoursewareQueryExe {
} }
// 个人账户：检查创建者ID匹配 // 个人账户：检查创建者ID匹配
if ((!isCorpAccount || (AuthContext.getRoleIds()!=null && AuthContext.getRoleIds().contains("2008483105201106946"))) && videoCoursewareCO.getCreateId().equals(AuthContext.getUserId())) { if ((!isCorpAccount || (AuthContext.getRoleIds()!=null && AuthContext.getRoleIds().contains(2008483105201106946L))) && videoCoursewareCO.getCreateId().equals(AuthContext.getUserId())) {
videoCoursewareCO.setIsUserCreate(true); videoCoursewareCO.setIsUserCreate(true);
return; return;
} }

4
web-app/src/main/java/com/zcloud/edu/command/query/study/ClassQueryExe.java
View File

@ -93,8 +93,8 @@ public class ClassQueryExe {
classCO.setIsUserCreate(true); classCO.setIsUserCreate(true);
} }
// 个人账户：检查创建者ID匹配 // 个人账户：检查创建者ID匹配
if (!checkCorp && (teacherInfoByUserId != null && teacherInfoByUserId.getUserId().equals(classCO.getCreateId()))) { if ((!checkCorp ||(AuthContext.getRoleIds()!=null && AuthContext.getRoleIds().contains(2008483105201106946L))) && (teacherInfoByUserId != null && teacherInfoByUserId.getUserId().equals(classCO.getCreateId()))) {
classCO.setIsUserCreate(true); classCO.setIsUserCreate(true);
} }
/* /*
if(checkCorp || (teacherInfoByUserId != null && teacherInfoByUserId.getUserId().equals(classCO.getCreateId()))){ if(checkCorp || (teacherInfoByUserId != null && teacherInfoByUserId.getUserId().equals(classCO.getCreateId()))){

5
web-app/src/main/java/com/zcloud/edu/command/resource/CurriculumUpdateExe.java
View File

@ -152,8 +152,9 @@ public class CurriculumUpdateExe {
errorList.add(curriculumDO.getCurriculumName()+"课程不是本企业的"); errorList.add(curriculumDO.getCurriculumName()+"课程不是本企业的");
} }
// 个人账户：检查创建者ID匹配 // 个人账户：检查创建者ID匹配
if (!isCorpAccount && !curriculumDO.getCreateId().equals(AuthContext.getUserId())) { if ((!isCorpAccount || (AuthContext.getRoleIds()!=null && AuthContext.getRoleIds().contains(2008483105201106946L))) && curriculumDO.getCreateId().equals(AuthContext.getUserId())) {
errorList.add(curriculumDO.getCurriculumName()+"课程不是本人创建的");
errorList.add(curriculumDO.getCurriculumName()+"课程不是本人创建的");
} }
} }