From 1b8e7b7dc40484ecaf8578130be8111ea84023a5 Mon Sep 17 00:00:00 2001 From: taojinlong Date: Thu, 24 Feb 2022 11:13:46 +0800 Subject: [PATCH] =?UTF-8?q?fix:=20=E5=85=AC=E5=85=B1=E9=93=BE=E6=8E=A5?= =?UTF-8?q?=E8=8E=B7=E5=8F=96=E7=94=A8=E6=88=B7=E4=BF=A1=E6=81=AF=E6=8A=A5?= =?UTF-8?q?=E9=94=99?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- .../controller/dataset/DataSetTableController.java | 2 +- .../java/io/dataease/service/chart/ChartViewService.java | 2 +- .../io/dataease/service/dataset/DataSetTableService.java | 9 +++++++-- 3 files changed, 9 insertions(+), 4 deletions(-) diff --git a/backend/src/main/java/io/dataease/controller/dataset/DataSetTableController.java b/backend/src/main/java/io/dataease/controller/dataset/DataSetTableController.java index fc1b99c337..3d9356e50b 100644 --- a/backend/src/main/java/io/dataease/controller/dataset/DataSetTableController.java +++ b/backend/src/main/java/io/dataease/controller/dataset/DataSetTableController.java @@ -105,7 +105,7 @@ public class DataSetTableController { @ApiOperation("带权限查询") @PostMapping("getWithPermission/{id}") public DataSetTableDTO getWithPermission(@PathVariable String id) { - return dataSetTableService.getWithPermission(id); + return dataSetTableService.getWithPermission(id, null); } @ApiOperation("查询原始字段") diff --git a/backend/src/main/java/io/dataease/service/chart/ChartViewService.java b/backend/src/main/java/io/dataease/service/chart/ChartViewService.java index e7b266c21e..828c206dc3 100644 --- a/backend/src/main/java/io/dataease/service/chart/ChartViewService.java +++ b/backend/src/main/java/io/dataease/service/chart/ChartViewService.java @@ -248,7 +248,7 @@ public class ChartViewService { DatasetTableField datasetTableFieldObj = DatasetTableField.builder().tableId(view.getTableId()).checked(Boolean.TRUE).build(); List fields = dataSetTableFieldsService.list(datasetTableFieldObj); // 获取数据集,需校验权限 - DataSetTableDTO table = dataSetTableService.getWithPermission(view.getTableId()); + DataSetTableDTO table = dataSetTableService.getWithPermission(view.getTableId(), requestList.getUser()); checkPermission("use", table, requestList.getUser()); //列权限 diff --git a/backend/src/main/java/io/dataease/service/dataset/DataSetTableService.java b/backend/src/main/java/io/dataease/service/dataset/DataSetTableService.java index 469583ad43..e2fc21d256 100644 --- a/backend/src/main/java/io/dataease/service/dataset/DataSetTableService.java +++ b/backend/src/main/java/io/dataease/service/dataset/DataSetTableService.java @@ -2,6 +2,8 @@ package io.dataease.service.dataset; import com.google.gson.Gson; import io.dataease.auth.annotation.DeCleaner; +import io.dataease.auth.api.dto.CurrentUserDto; +import io.dataease.auth.entity.SysUserEntity; import io.dataease.base.domain.*; import io.dataease.base.mapper.*; import io.dataease.base.mapper.ext.ExtDataSetGroupMapper; @@ -401,10 +403,13 @@ public class DataSetTableService { return datasetTableMapper.selectByPrimaryKey(id); } - public DataSetTableDTO getWithPermission(String id) { + public DataSetTableDTO getWithPermission(String id, Long user) { + CurrentUserDto currentUserDto = AuthUtils.getUser(); + Long userId = user != null ? currentUserDto.getUserId() : user; + DataSetTableRequest dataSetTableRequest = new DataSetTableRequest(); dataSetTableRequest.setId(id); - dataSetTableRequest.setUserId(String.valueOf(AuthUtils.getUser().getUserId())); + dataSetTableRequest.setUserId(String.valueOf(userId)); dataSetTableRequest.setTypeFilter(dataSetTableRequest.getTypeFilter()); return extDataSetTableMapper.searchOne(dataSetTableRequest); }