Prechádzať zdrojové kódy

fix(sys): 修正客户数据权限校验逻辑

- 移除基于流的角色过滤代码,简化权限判断逻辑
- 改为直接判断用户角色是否包含 Admin
- 保留注释中旧的多角色校验逻辑,便于后续参考
- 统一异常抛出位置和格式,确保无权操作统一处理
zhangxf 3 týždňov pred
rodič
commit
02b9fda6eb

+ 3 - 15
src/main/java/com/jtzx/crm/module/sys/service/SysCustomerDataPermissionService.java

@@ -7,8 +7,6 @@ import lombok.RequiredArgsConstructor;
 import lombok.extern.slf4j.Slf4j;
 import org.springframework.stereotype.Service;
 
-import java.util.Objects;
-
 /**
  * 客户数据权限业务
  */
@@ -26,19 +24,9 @@ public class SysCustomerDataPermissionService {
             throw new BusinessException(400, "无权操作");
         }
 
-        UserContextHolder.getUserContext().getRoles().stream()
-                .filter(role -> !"Admin".equals(role))
-                .filter(Objects::nonNull)
-                .findAny()
-                .ifPresent(role -> {
-                    throw new BusinessException(400, "无权操作");
-                });
-
-
-//        if (!UserContextHolder.getUserContext().getRoles().contains("Admin") ||
-//                !UserContextHolder.getUserContext().getRoles().contains("Member")) {
-//            throw new BusinessException(400, "无权操作");
-//        }
+        if (!UserContextHolder.getUserContext().getRoles().contains("Admin")) {
+            throw new BusinessException(400, "无权操作");
+        }
     }
 
     public void adminPermission() throws BusinessException{