github/dataease
github/dataease
3
0
Fork 1
mirror of https://github.com/dataease/dataease.git synced 2025-02-24 11:32:57 +08:00
Code Issues Actions 1 Packages Projects Releases Wiki Activity

fix: 角色列表接口sql-inject

Browse Source
This commit is contained in:
fit2cloud-chenyw 2023-09-11 11:03:07 +08:00
parent 4da7495f91
commit 197473bb36
2 changed files with 29 additions and 29 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

13
core/backend/src/main/java/io/dataease/plugins/server/XRoleServer.java
View File

@ -16,7 +16,7 @@ import io.dataease.commons.utils.PageUtils;
import io.dataease.commons.utils.Pager; import io.dataease.commons.utils.Pager;
import io.dataease.dto.SysLogDTO; import io.dataease.dto.SysLogDTO;
import io.dataease.listener.util.CacheUtils; import io.dataease.listener.util.CacheUtils;
import io.dataease.plugins.common.entity.XpackGridRequest; import io.dataease.plugins.common.request.KeywordRequest;
import io.dataease.plugins.config.SpringContextUtil; import io.dataease.plugins.config.SpringContextUtil;
import io.dataease.plugins.xpack.role.dto.request.RoleUserMappingRequest; import io.dataease.plugins.xpack.role.dto.request.RoleUserMappingRequest;
import io.dataease.plugins.xpack.role.dto.request.RoleUserRequest; import io.dataease.plugins.xpack.role.dto.request.RoleUserRequest;
@ -31,12 +31,14 @@ import io.swagger.annotations.ApiOperation;
import org.apache.commons.collections4.CollectionUtils; import org.apache.commons.collections4.CollectionUtils;
import org.apache.shiro.authz.annotation.RequiresPermissions; import org.apache.shiro.authz.annotation.RequiresPermissions;
import org.springframework.beans.factory.annotation.Autowired; import org.springframework.beans.factory.annotation.Autowired;
import static io.dataease.commons.constants.SysLogConstants.OPERATE_TYPE;
import static io.dataease.commons.constants.SysLogConstants.SOURCE_TYPE;
import org.springframework.web.bind.annotation.*; import org.springframework.web.bind.annotation.*;
import springfox.documentation.annotations.ApiIgnore; import springfox.documentation.annotations.ApiIgnore;
import java.util.List; import java.util.List;
import static io.dataease.commons.constants.SysLogConstants.OPERATE_TYPE;
import static io.dataease.commons.constants.SysLogConstants.SOURCE_TYPE;
@Api(tags = "xpack：角色管理") @Api(tags = "xpack：角色管理")
@RequestMapping("/plugin/role") @RequestMapping("/plugin/role")
@RestController @RestController
@ -95,11 +97,10 @@ public class XRoleServer {
@ApiImplicitParam(name = "request", value = "查询条件", required = true) @ApiImplicitParam(name = "request", value = "查询条件", required = true)
}) })
@SqlInjectValidator(value = {"create_time", "name"}) @SqlInjectValidator(value = {"create_time", "name"})
public Pager<List<XpackRoleDto>> roleGrid(@PathVariable int goPage, @PathVariable int pageSize, @RequestBody XpackGridRequest request) { public Pager<List<XpackRoleDto>> roleGrid(@PathVariable int goPage, @PathVariable int pageSize, @RequestBody KeywordRequest request) {
RoleXpackService roleXpackService = SpringContextUtil.getBean(RoleXpackService.class); RoleXpackService roleXpackService = SpringContextUtil.getBean(RoleXpackService.class);
Page<Object> page = PageHelper.startPage(goPage, pageSize, true); Page<Object> page = PageHelper.startPage(goPage, pageSize, true);
Pager<List<XpackRoleDto>> listPager = PageUtils.setPageInfo(page, roleXpackService.query(request)); return PageUtils.setPageInfo(page, roleXpackService.query(request));
return listPager;
} }
@ApiIgnore @ApiIgnore

5
sdk/dataease-plugin-interface/src/main/java/io/dataease/plugins/xpack/role/service/RoleXpackService.java
View File

@ -1,6 +1,6 @@
package io.dataease.plugins.xpack.role.service; package io.dataease.plugins.xpack.role.service;
import io.dataease.plugins.common.entity.XpackGridRequest; import io.dataease.plugins.common.request.KeywordRequest;
import io.dataease.plugins.common.service.PluginMenuService; import io.dataease.plugins.common.service.PluginMenuService;
import io.dataease.plugins.xpack.role.dto.request.RoleUserMappingRequest; import io.dataease.plugins.xpack.role.dto.request.RoleUserMappingRequest;
import io.dataease.plugins.xpack.role.dto.request.RoleUserRequest; import io.dataease.plugins.xpack.role.dto.request.RoleUserRequest;
@ -14,14 +14,13 @@ import java.util.List;
public abstract class RoleXpackService extends PluginMenuService { public abstract class RoleXpackService extends PluginMenuService {
public abstract void save(XpackRoleDto dto); public abstract void save(XpackRoleDto dto);
public abstract void delete(Long roleId); public abstract void delete(Long roleId);
public abstract void update(XpackRoleDto dto); public abstract void update(XpackRoleDto dto);
public abstract List<XpackRoleDto> query(XpackGridRequest request); public abstract List<XpackRoleDto> query(KeywordRequest request);
public abstract List<XpackRoleItemDto> allRoles(); public abstract List<XpackRoleItemDto> allRoles();