数据权限的bug修改

This commit is contained in:
1745237360-cloud
2026-01-12 14:30:00 +08:00
parent f7e6f70321
commit c8493dd658
5 changed files with 137 additions and 17 deletions
@@ -28,6 +28,8 @@ import javax.annotation.Resource;
import com.mhd.common.core.web.controller.BaseController;
import com.mhd.common.core.web.domain.AjaxResult;
import com.mhd.common.core.web.page.TableDataInfo;
import com.mhd.common.security.utils.SecurityUtils;
import com.mhd.system.api.model.LoginUser;
import org.springframework.web.client.RestTemplate;
/**
@@ -99,6 +101,21 @@ public class ExpenseAccountApi extends BaseController{
public AjaxResult selectOtherExpenseAccount(SearchExpenseAccountDTO searchExpenseAccountDTO){
SearchExpenseAccountDO searchExpenseAccountDO = new SearchExpenseAccountDO();
BeanUtils.copyProperties(searchExpenseAccountDTO,searchExpenseAccountDO);
// 数据权限:根据组织ID实现数据隔离
// organizationId=2827(南光)时,查询所有组织的数据;其他组织只查询自己的数据
LoginUser loginUser = SecurityUtils.getLoginUser();
if (loginUser != null && loginUser.getOrganizationPo() != null) {
Long loginUserOrganizationId = loginUser.getOrganizationPo().getOrganizationId();
if (loginUserOrganizationId != null && loginUserOrganizationId.equals(2827L)) {
// 南光组织(organizationId=2827):可以查询所有组织的数据,不设置 organizationId 过滤条件
searchExpenseAccountDO.setOrganizationId(null);
} else {
// 其他组织:只查询自己组织的数据
searchExpenseAccountDO.setOrganizationId(loginUserOrganizationId);
}
}
return AjaxResult.success(expenseAccountApplicationService.selectOtherExpenseAccount(searchExpenseAccountDO));
}