From 52d5c9930a199430d0f524e24e85eb65e09514c9 Mon Sep 17 00:00:00 2001
From: 无关风月 <443237572@qq.com>
Date: 星期四, 13 二月 2025 08:57:43 +0800
Subject: [PATCH] bug修改

---
 ruoyi-service/ruoyi-order/src/main/java/com/ruoyi/order/controller/TOrderInvoiceController.java |   39 +++++++++++++++++++++++++++------------
 1 files changed, 27 insertions(+), 12 deletions(-)

diff --git a/ruoyi-service/ruoyi-order/src/main/java/com/ruoyi/order/controller/TOrderInvoiceController.java b/ruoyi-service/ruoyi-order/src/main/java/com/ruoyi/order/controller/TOrderInvoiceController.java
index 5637f6c..c376527 100644
--- a/ruoyi-service/ruoyi-order/src/main/java/com/ruoyi/order/controller/TOrderInvoiceController.java
+++ b/ruoyi-service/ruoyi-order/src/main/java/com/ruoyi/order/controller/TOrderInvoiceController.java
@@ -9,13 +9,13 @@
 import com.ruoyi.common.core.web.page.PageInfo;
 import com.ruoyi.common.log.annotation.Log;
 import com.ruoyi.common.log.enums.BusinessType;
+import com.ruoyi.common.security.annotation.Logical;
+import com.ruoyi.common.security.annotation.RequiresPermissions;
+import com.ruoyi.common.security.service.TokenService;
 import com.ruoyi.order.api.model.TOrderInvoice;
 import com.ruoyi.order.api.query.TOrderInvoiceQuery;
 import com.ruoyi.order.api.vo.TOrderInvoiceVO;
-import com.ruoyi.order.dto.AddOrderInvoice;
-import com.ruoyi.order.dto.GetOrderInvoiceList;
-import com.ruoyi.order.dto.MyOrderInvoiceInfo;
-import com.ruoyi.order.dto.OrderInvoiceList;
+import com.ruoyi.order.dto.*;
 import com.ruoyi.order.export.OrderInvoiceExport;
 import com.ruoyi.order.service.TOrderInvoiceService;
 import io.swagger.annotations.Api;
@@ -53,6 +53,9 @@
 	@Resource
 	private TOrderInvoiceService orderInvoiceService;
 	
+	@Resource
+	private TokenService tokenService;
+	
 	
 	
 	
@@ -62,19 +65,23 @@
 	public AjaxResult addOrderInvoice(@RequestBody AddOrderInvoice addOrderInvoice){
 		return orderInvoiceService.addOrderInvoice(addOrderInvoice);
 	}
-
+	
+	
+	@RequiresPermissions(value = {"/invoiceManagement"}, logical = Logical.OR)
 	@PostMapping("/pageList")
 	@ApiOperation(value = "查询开票分页列表", tags = {"管理后台-发票管理"})
 	public AjaxResult<PageInfo<TOrderInvoiceVO>> pageList(@RequestBody TOrderInvoiceQuery query){
 		return AjaxResult.success(orderInvoiceService.pageList(query));
 	}
 
-	@GetMapping("/uploadPdf")
+	
+	
+	@RequiresPermissions(value = {"/invoiceManagement/accept_hear_case"}, logical = Logical.OR)
+	@PostMapping("/uploadPdf")
 	@ApiOperation(value = "上传发票", tags = {"管理后台-发票管理"})
-	public AjaxResult<String> uploadPdf(@RequestParam("id") Long id,
-										@RequestParam("invoiceUrl") String invoiceUrl){
-		TOrderInvoice orderInvoice = orderInvoiceService.getById(id);
-		orderInvoice.setInvoiceUrl(invoiceUrl);
+	public AjaxResult<String> uploadPdf(@RequestBody UploadPdfDTO dto){
+		TOrderInvoice orderInvoice = orderInvoiceService.getById(dto.getId());
+		orderInvoice.setInvoiceUrl(dto.getInvoiceUrl());
 		orderInvoice.setStatus(3);
 		orderInvoiceService.updateById(orderInvoice);
 		// 发送邮箱
@@ -134,7 +141,7 @@
 
 			// 组装附件
 			MimeBodyPart filePart = new MimeBodyPart();
-			String imageUrl = invoiceUrl;
+			String imageUrl = dto.getInvoiceUrl();
 			try {
 				// 下载数据
 				URL url = new URL(imageUrl);
@@ -175,7 +182,9 @@
 		}
 		return AjaxResult.success();
 	}
-
+	
+	
+	@RequiresPermissions(value = {"/invoiceManagement"}, logical = Logical.OR)
 	@PostMapping("/statusCount")
 	@ApiOperation(value = "查询开票状态数量", tags = {"管理后台-发票管理"})
 	public AjaxResult<Map<String,Integer>> statusCount(@RequestBody TOrderInvoiceQuery query){
@@ -185,6 +194,7 @@
 	/**
 	 * 发票管理导出
 	 */
+	@RequiresPermissions(value = {"/invoiceManagement/export"}, logical = Logical.OR)
 	@ApiOperation(value = "发票管理导出", tags = {"管理后台-发票管理"})
 	@Log(title = "发票管理导出", businessType = BusinessType.EXPORT)
 	@PutMapping("/export")
@@ -238,6 +248,11 @@
 	@GetMapping("/getMyOrderInvoiceInfo/{id}")
 	@ApiOperation(value = "获取开票记录详情", tags = {"小程序-充电发票"})
 	public AjaxResult<MyOrderInvoiceInfo> getMyOrderInvoiceInfo(@PathVariable String id){
+		TOrderInvoice orderInvoice = orderInvoiceService.getById(id);
+		Long userId = tokenService.getLoginUserApplet().getUserId();
+		if(!orderInvoice.getAppUserId().equals(userId)){
+			return AjaxResult.error("权限不足");
+		}
 		MyOrderInvoiceInfo myOrderInvoiceInfo = orderInvoiceService.getMyOrderInvoiceInfo(id);
 		return AjaxResult.success(myOrderInvoiceInfo);
 	}

--
Gitblit v1.7.1