From e35c3733ede51ffecc21755aca47106a068adf48 Mon Sep 17 00:00:00 2001 From: zhaokai Date: Mon, 9 Mar 2026 13:41:57 +0800 Subject: [PATCH] =?UTF-8?q?fix(auth):=20=E4=BF=AE=E5=A4=8D=E4=BC=81?= =?UTF-8?q?=E4=B8=9A=E8=B4=A6=E6=88=B7=E6=9D=83=E9=99=90=E9=AA=8C=E8=AF=81?= =?UTF-8?q?=E4=B8=AD=E7=9A=84=E7=A7=9F=E6=88=B7ID=E5=8C=B9=E9=85=8D?= =?UTF-8?q?=E9=97=AE=E9=A2=98?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- .../edu/command/query/resource/VideoCoursewareQueryExe.java | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/web-app/src/main/java/com/zcloud/edu/command/query/resource/VideoCoursewareQueryExe.java b/web-app/src/main/java/com/zcloud/edu/command/query/resource/VideoCoursewareQueryExe.java index 9787152..ce61a32 100644 --- a/web-app/src/main/java/com/zcloud/edu/command/query/resource/VideoCoursewareQueryExe.java +++ b/web-app/src/main/java/com/zcloud/edu/command/query/resource/VideoCoursewareQueryExe.java @@ -69,13 +69,13 @@ public class VideoCoursewareQueryExe { Boolean isCorpAccount = corpInfoRepository.checkCorp(); // 企业账户：检查租户ID匹配 ，获取权限是体液主账号 - if ((isCorpAccount|| (AuthContext.getRoleIds()!=null && AuthContext.getRoleIds().contains("2008483105201106946"))) && AuthContext.getTenantId().equals(videoCoursewareCO.getCorpinfoId())) { + if ((isCorpAccount) && AuthContext.getTenantId().equals(videoCoursewareCO.getCorpinfoId())) { videoCoursewareCO.setIsUserCreate(true); return; } // 个人账户：检查创建者ID匹配 - if (!isCorpAccount && videoCoursewareCO.getCreateId().equals(AuthContext.getUserId())) { + if ((!isCorpAccount || (AuthContext.getRoleIds()!=null && AuthContext.getRoleIds().contains("2008483105201106946"))) && videoCoursewareCO.getCreateId().equals(AuthContext.getUserId())) { videoCoursewareCO.setIsUserCreate(true); return; }