浏览代码

fix 新增用户权限校验

zoujiajian 3 年之前
父节点
当前提交
97e117b886
共有 1 个文件被更改,包括 8 次插入0 次删除
  1. 8 0
      netflix-web/src/main/java/com/cyksj/web/controller/manage/AdminController.java

+ 8 - 0
netflix-web/src/main/java/com/cyksj/web/controller/manage/AdminController.java

@@ -85,6 +85,14 @@ public class AdminController {
 
     @PostMapping("/post")
     public Result<String> saveAdmin(@RequestBody @Validated Admin admin) throws Exception {
+        Long adminId = StpUserUtil.getLoginIdAsLong();
+        Admin exist = adminService.getById(adminId);
+        if (exist == null) {
+            throw BusinessRuntimeException.getInstance("账号不存在,请重新登录");
+        }
+        if (exist.getCategory() != Admin.Category.superoot) {
+            throw BusinessRuntimeException.getInstance("无超级管理员权限");
+        }
         if (StringUtils.isNotBlank(admin.getPassWord())) {
             admin.setPassWord(Codec.DoDigest.custom().setAlgorithm(Codec.DoDigest.Algorithm.SHA256).setStringData(admin.getPassWord()).toBase64String());
         }